PT-2023-2574 · Google+2 · Google Chrome+2

Rong

·

Published

2023-05-02

·

Updated

2024-11-29

·

CVE-2023-2459

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 113.0.5672.63
Description The issue is related to an inappropriate implementation in Prompts in Google Chrome, which allowed a remote attacker to bypass permission restrictions via a crafted HTML page. This could be achieved by exploiting a security check flaw for standard elements, enabling the attacker to circumvent security limitations.
Recommendations For versions prior to 113.0.5672.63, update to version 113.0.5672.63 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted HTML pages that could exploit the vulnerability in Prompts until a patch is applied.

Fix

Improperly Implemented Security Check for Standard

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-358

Related Identifiers

ALT-PU-2023-1764
ALT-PU-2023-4119
ALT-PU-2023-4763
ALT-PU-2023-4766
ALT-PU-2023-4767
ALT-PU-2023-5790
ALT-PU-2023-6351
ALT-PU-2023-8437
ALT-PU-2024-14286
ALT-PU-2024-14830
BDU:2023-02389
CVE-2023-2459
DSA-5398-1
OPENSUSE-SU-2023:0117-1
OPENSUSE-SU-2024:12922-1
OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux
Astra Linux
Google Chrome