Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39847
HistoryMar 18, 2023 - 1:47 p.m.

Authentication Bypass

2023-03-1813:47:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
authentication bypass
google chrome
vulnerability
extensions api
policy enforcement
attacker
navigation restrictions
crafted chrome extension

0.001 Low

EPSS

Percentile

33.2%

Google Chrome is vulnerable to Authentication Bypass. The vulnerability exists due to the insufficient policy enforcement in Extensions API, which allows an attacker to bypass navigation restrictions via a crafted Chrome Extension.