Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2018-20071
HistoryJan 09, 2019 - 7:29 p.m.

CVE-2018-20071

2019-01-0919:29:00
Debian Security Bug Tracker
security-tracker.debian.org
12

0.001 Low

EPSS

Percentile

42.2%

Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install a service worker for a domain that can host attacker controled files via a crafted HTML page.

OSVersionArchitecturePackageVersionFilename
Debian9allchromium-browser< 70.0.3538.110-1~deb9u1chromium-browser_70.0.3538.110-1~deb9u1_all.deb

0.001 Low

EPSS

Percentile

42.2%