PT-2023-6663 · Google+3 · Google Chrome+3
Slonser
+1
·
Publicado
2023-10-31
·
Atualizado
2025-01-15
·
CVE-2023-5480
CVSS v2.0
8.7
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 119.0.6045.105
Description
The issue is related to an inappropriate implementation in the Payments component of Google Chrome, allowing a remote attacker to bypass XSS preventions via a malicious file. This can enable the attacker to circumvent security restrictions and gain unauthorized access to protected information. The Chromium security severity of this issue is rated as High.
Recommendations
For Google Chrome versions prior to 119.0.6045.105, update to version 119.0.6045.105 or later to resolve the issue. As a temporary workaround, consider restricting access to the Payments component until a patch is applied. Avoid using potentially vulnerable features in the affected versions until the issue is resolved.
Exploit
Correção
XSS
Improperly Implemented Security Check for Standard
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Google Chrome
Red Os