PT-2020-2023
CVE-2020-6408
·
Published
2020-02-04
·
Updated
2024-06-15
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 80.0.3987.87
Description
The issue is related to insufficient policy enforcement in CORS, allowing a local attacker to obtain potentially sensitive information via a crafted HTML page. This could enable an attacker to gain unauthorized access to information.
Recommendations
For Google Chrome versions prior to 80.0.3987.87, update to version 80.0.3987.87 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾