Description
Insufficient data validation in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
References (4)
Scores
CVSS v3
6.5
EPSS
0.0003
EPSS Percentile
10.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Details
CWE
CWE-345
Status
published
Products (1)
google/chrome
< 111.0.5563.64
Published
Jul 29, 2023
Tracked Since
Feb 18, 2026