Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Low)
References
Link | Resource |
---|---|
https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html | Release Notes Vendor Advisory |
https://crbug.com/1367632 | Issue Tracking Permissions Required Vendor Advisory |
https://security.gentoo.org/glsa/202305-10 | |
https://security.gentoo.org/glsa/202311-11 |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Chrome
Published: 2023-01-10T00:00:00
Updated: 2023-11-25T11:06:44.455953
Reserved: 2023-01-09T00:00:00
Link: CVE-2023-0139
JSON object: View
NVD Information
Status : Modified
Published: 2023-01-10T20:15:11.293
Modified: 2023-11-25T11:15:13.543
Link: CVE-2023-0139
JSON object: View
Redhat Information
No data.
CWE