CVE-2024-1671

2024-02-2104:15:08

Chrome

web.nvd.nist.gov

5325

chrome

site isolation

cve-2024-1671

content security policy

chromium

nvd

AI Score

4.8

Confidence

High

EPSS

Percentile

15.5%

JSON

Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

Affected configurations

Vulners

Node

googlechromeRange<122.0.6261.57

VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	chrome	*	cpe:2.3:a:google:chrome::::::::

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "122.0.6261.57",
        "status": "affected",
        "lessThan": "122.0.6261.57",
        "versionType": "custom"
      }
    ]
  }
]