Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2022-3201
HistorySep 26, 2022 - 4:15 p.m.

CVE-2022-3201

2022-09-2616:15:13
Alpine Linux Development Team
security.alpinelinux.org
26
chrome os
devtools
insufficient validation
google chrome
html page
navigation restrictions
cve-2022-3201
chromium security

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

6.3 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.4%

Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

6.3 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.4%