PT-2024-8969 · Google+5 · Google Chrome+5

Ameen Basha M K · Published 2024-11-12 · Updated 2025-03-19 · CVE-2024-11117

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 131.0.6778.69 Microsoft Edge (affected versions not specified)

Description: The issue is related to an inappropriate implementation in the FileSystem component, allowing a remote attacker to bypass filesystem restrictions via a crafted HTML page. This can be exploited by a remote attacker to bypass standard security checks. The severity of this issue is classified as low.

Recommendations: For Google Chrome versions prior to 131.0.6778.69, update to version 131.0.6778.69 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-79

CWE-358

Related Identifiers

ALT-PU-2024-17740

ALT-PU-2025-4366

BDU:2024-10651

CVE-2024-11117

DSA-5817-1

OPENSUSE-SU-2024:0373-1

OPENSUSE-SU-2024:0374-1

OPENSUSE-SU-2024:14511-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Edge

Red Os

References · 44

• https://bdu.fstec.ru/vul/2024-10651 · Security Note
• https://osv.dev/vulnerability/DSA-5817-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-11117 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-11117 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-11117 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-11117 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE47 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14511-1 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-11117 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:0373-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11117 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0411SE18 · Vendor Advisory