Exploitation Summary
EIP tracks 3 public exploits for CVE-2022-0337. PoCs published by Puliczek, zer0ne1, maldev866.
AI-analyzed exploit summary This repository documents CVE-2022-0337, an environment variable leak vulnerability in Chromium-based browsers (Chrome, Edge, Opera) via the `window.showSaveFilePicker()` API. The PoC demonstrates how an attacker could leak sensitive environment variables by exploiting file save dialogs.
Description
Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. (Chrome security severity: High)
Exploits (3)
This repository documents CVE-2022-0337, an environment variable leak vulnerability in Chromium-based browsers (Chrome, Edge, Opera) via the `window.showSaveFilePicker()` API. The PoC demonstrates how an attacker could leak sensitive environment variables by exploiting file save dialogs.
The provided code is a minimal Flask application that does not demonstrate any exploit for CVE-2022-0337. It lacks offensive techniques or vulnerability exploitation logic.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N