Lucene search

K
osvGoogleOSV:CVE-2024-0333
HistoryJan 10, 2024 - 10:15 p.m.

CVE-2024-0333

2024-01-1022:15:50
Google
osv.dev
2
data validation
google chrome
extension installation
crafted html page
privileged network position
security severity

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

5.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.8%

Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. (Chromium security severity: High)

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

5.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.8%