CVE-2022-4915

2023-07-2900:15:11

Google

osv.dev

cve-2022-4915

inappropriate implementation

google chrome

remote attacker

domain spoofing

crafted html page

security severity medium

software

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.5%

JSON

Inappropriate implementation in URL Formatting in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)

CPENameOperatorVersion
chromiumeq109.0.5414.74-2
chromiumeq103.0.5060.53-1
chromiumeq108.0.5359.71-1
chromiumeq119.0.6045.199-1
chromiumeq116.0.5845.180-1
chromiumeq117.0.5938.62-1~deb11u1
chromiumeq83.0.4103.116-2
chromiumeq88.0.4324.182-1~deb10u1
chromiumeq99.0.4844.74-1~deb11u1
chromiumeq80.0.3987.162-1

Name	Operator	Version
chromium	eq	109.0.5414.74-2
chromium	eq	103.0.5060.53-1
chromium	eq	108.0.5359.71-1
chromium	eq	119.0.6045.199-1
chromium	eq	116.0.5845.180-1
chromium	eq	117.0.5938.62-1~deb11u1
chromium	eq	83.0.4103.116-2
chromium	eq	88.0.4324.182-1~deb10u1
chromium	eq	99.0.4844.74-1~deb11u1
chromium	eq	80.0.3987.162-1