Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43059
HistorySep 01, 2023 - 1:24 a.m.

Authorization Bypass

2023-09-0101:24:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
chromium
devtools
module
extension
file access restrictions

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

0.0005 Low

EPSS

Percentile

18.0%

chromium is vulnerable to Authorization Bypasses. The vulnerability exists in the DevTools module of Google Chrome. The module is responsible for providing developers with tools to debug and inspect web pages. The vulnerability occurs when the module fails to properly check the permissions of a file that is opened by a malicious extension. This can allow the extension to bypass file access restrictions and read or write files that it should not be able to access.

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

0.0005 Low

EPSS

Percentile

18.0%