PT-2023-5909 · Google+4 · Google Chrome+4
Shaheen Fazim
·
Publicado
2023-10-10
·
Atualizado
2024-11-29
·
CVE-2023-5478
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 118.0.5993.70
Description
The issue is related to an inappropriate implementation in the Autofill feature of Google Chrome, which allowed a remote attacker to leak cross-origin data via a crafted HTML page. This is due to incorrectly implemented security checks for standard elements. The estimated number of potentially affected devices and details about real-world incidents are not provided.
Recommendations
For versions prior to 118.0.5993.70, update to version 118.0.5993.70 or later to resolve the issue. As a temporary workaround, consider disabling the Autofill feature until a patch is available. Restrict access to sensitive information when using Google Chrome until the update is applied.
Exploit
Correção
Improperly Implemented Security Check for Standard
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Google Chrome
Red Os
Suse