CVE-2024-1672

2024-02-2103:14:43

Chrome

github.com

content security policy

google chrome

remote attacker

bypass

crafted html page

chromium security severity

AI Score

5.9

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "chrome",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "122.0.6261.57",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]