PT-2021-2056
CVE-2021-21131
·
تاريخ النشر
2021-01-19
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Google Chrome versions prior to 88.0.4324.96
Description:
The issue is related to insufficient policy enforcement in the File System API, allowing a remote attacker to bypass filesystem restrictions. This can be achieved via a crafted HTML page. The vulnerability is associated with weaknesses in the authentication procedure.
Recommendations:
For versions prior to 88.0.4324.96, update to version 88.0.4324.96 or later to resolve the issue. As a temporary workaround, consider restricting access to the File System API until a patch is applied. Avoid using the File System API in sensitive operations until the issue is resolved.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾