PT-2020-3508
CVE-2020-6482
·
تاريخ النشر
2020-05-19
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 83.0.4103.61
Description
The issue is related to insufficient policy enforcement in developer tools, allowing an attacker to bypass navigation restrictions via a crafted Chrome Extension if a user is convinced to install a malicious extension. This could potentially impact the integrity of data.
Recommendations
For Google Chrome versions prior to 83.0.4103.61, update to version 83.0.4103.61 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to only trusted sources to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾