Lucene search

GoogleVULNRICHMENT:CVE-2023-3481

HistoryAug 21, 2023 - 10:04 a.m.

CVE-2023-3481 XSS in Chrome Lab Critters

2023-08-2110:04:23

CWE-116

CWE-80

Google

github.com

cve-2023-3481

chrome lab

cross-site scripting

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

AI Score

5.9

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Critters versions 0.0.17-0.0.19 have an issue when parsing the HTML, which leads to a potential cross-site scripting (XSS) bug. We recommend upgrading to version 0.0.20 of the extension.

References

github.com/GoogleChromeLabs/critters/security/advisories/GHSA-cx3j-qqxj-9597

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

AI Score

5.9

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2023-3481