PT-2021-5614 · Google+2 · Google Chrome+2

Retsew0X01 · Published 2021-05-16 · Updated 2024-06-15 · CVE-2021-30506

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 90.0.4430.212

Description The issue is related to incorrect security UI in Web App Installs, allowing an attacker to inject scripts or HTML into a privileged page via a crafted HTML page if they convince a user to install a web application. This could enable a remote attacker to redirect users to a malicious web page.

Recommendations For Google Chrome on Android versions prior to 90.0.4430.212, update to version 90.0.4430.212 or later to resolve the issue. As a temporary workaround, consider avoiding the installation of web applications from untrusted sources until the update is applied.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

BDU:2022-00049

CVE-2021-30506

DSA-4917-1

OPENSUSE-SU-2021:0742-1

OPENSUSE-SU-2021:0762-1

OPENSUSE-SU-2021:0828-1

OPENSUSE-SU-2021:0829-1

OPENSUSE-SU-2021_0742-1

OPENSUSE-SU-2021_0762-1

OPENSUSE-SU-2021_0828-1

OPENSUSE-SU-2021_0829-1

OPENSUSE-SU-2022:0110-1

OPENSUSE-SU-2022_0110-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

Affected Products

Astra Linux

Google Chrome

Suse

References · 2346

• https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-30506 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-30506 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0110-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0762-1 · Vendor Advisory
• https://crbug.com/1180126 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-30506 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-30506 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-30506 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0742-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4917-1 · Vendor Advisory