Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38065
HistoryNov 17, 2022 - 12:57 a.m.

Information Disclosure

2022-11-1700:57:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
chromium
information disclosure
vulnerability
file system api
google chrome
remote attacker
data validation
software

0.002 Low

EPSS

Percentile

51.5%

chromium is vulnerable to information disclosure. The vulnerability exists due to insufficient data validation in File System API in Google Chrome which allows a remote attacker to bypass File System restrictions via a crafted HTML page.