CVE-2021-21175

2021-03-0918:15:16

Alpine Linux Development Team

security.alpinelinux.org

google chrome

site isolation

cross-origin data

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

6.6

Confidence

High

EPSS

0.005

Percentile

76.9%

JSON

Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchchromium< 89.0.4389.72-r0UNKNOWN
Alpineedge-communitynoarchqt5-qtwebengine< 5.15.3_git20200401-r0UNKNOWN
Alpine3.14-communitynoarchchromium< 89.0.4389.72-r0UNKNOWN
Alpine3.14-communitynoarchqt5-qtwebengine< 5.15.3_git20200401-r0UNKNOWN
Alpine3.15-communitynoarchchromium< 89.0.4389.72-r0UNKNOWN
Alpine3.15-communitynoarchqt5-qtwebengine< 5.15.3_git20200401-r0UNKNOWN
Alpine3.16-communitynoarchchromium< 89.0.4389.72-r0UNKNOWN
Alpine3.16-communitynoarchqt5-qtwebengine< 5.15.3_git20200401-r0UNKNOWN
Alpine3.17-communitynoarchchromium< 89.0.4389.72-r0UNKNOWN
Alpine3.17-communitynoarchqt5-qtwebengine< 5.15.3_git20200401-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	chromium	< 89.0.4389.72-r0	UNKNOWN
Alpine	edge-community	noarch	qt5-qtwebengine	< 5.15.3_git20200401-r0	UNKNOWN
Alpine	3.14-community	noarch	chromium	< 89.0.4389.72-r0	UNKNOWN
Alpine	3.14-community	noarch	qt5-qtwebengine	< 5.15.3_git20200401-r0	UNKNOWN
Alpine	3.15-community	noarch	chromium	< 89.0.4389.72-r0	UNKNOWN
Alpine	3.15-community	noarch	qt5-qtwebengine	< 5.15.3_git20200401-r0	UNKNOWN
Alpine	3.16-community	noarch	chromium	< 89.0.4389.72-r0	UNKNOWN
Alpine	3.16-community	noarch	qt5-qtwebengine	< 5.15.3_git20200401-r0	UNKNOWN
Alpine	3.17-community	noarch	chromium	< 89.0.4389.72-r0	UNKNOWN
Alpine	3.17-community	noarch	qt5-qtwebengine	< 5.15.3_git20200401-r0	UNKNOWN