Veracode Vulnerability DatabaseVERACODE:45635

HistoryFeb 26, 2024 - 8:26 a.m.

Inappropriate Implementation

2024-02-2608:26:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

chromium

vulnerability

navigation feature

google chrome

remote attacker

bypass navigation restrictions

crafted html page

software

AI Score

6.8

Confidence

High

EPSS

Percentile

15.5%

JSON

chromium is vulnerable to Inappropriate Implementation. The vulnerability is due to inappropriate implementation in the Navigation feature of Google Chrome, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page.

References

chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html

issues.chromium.org/issues/40095183

lists.fedoraproject.org/archives/list/[email protected]/message/PWWBMVQTSERVBXSXCZVUKIMEDNQUQ7O3/

lists.fedoraproject.org/archives/list/[email protected]/message/QDCMYQ3J45NHQ4EJREM3BJNNKB5BK4Y7/

security-tracker.debian.org/tracker/CVE-2024-1674

Inappropriate Implementation

References

Related