Lucene search

K
githubexploit3A476178-78E5-5B26-993F-17566490ECBD
HistoryNov 17, 2023 - 10:32 a.m.

Exploit for Improper Input Validation in Google Chrome

2023-11-1710:32:31
348
google chrome
vulnerability
cve-2023-4357
xxe
local file steal
chromium
electron
mac
windows
linux

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.002

Percentile

59.6%

工具简介

  • 全球首款单文件利用 CVE-2023-4357 Chrome XXE 漏洞 EXP,实现对访客者本地文件窃…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.002

Percentile

59.6%