CoreCVE
Back

MEDIUM

Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page

Published Aug 4, 2023

Description

Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner Chrome
Published Aug 4, 2023
Updated Aug 3, 2024
Reserved Jul 28, 2023
Link CVE-2022-4955

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-4955

Red Hat

No data

ENISA EUVD

Assigner Chrome
Published Aug 4, 2023
Updated Aug 3, 2024
Link EUVD-2022-52208

GitHub

No data