CVE-2024-1672

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-1672
Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

5.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html Exploit Issue Tracking
https://issues.chromium.org/issues/41485789 Release Notes
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PWWBMVQTSERVBXSXCZVUKIMEDNQUQ7O3/ Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDCMYQ3J45NHQ4EJREM3BJNNKB5BK4Y7/ Mailing List
https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html Release Notes
https://issues.chromium.org/issues/41485789 Exploit Issue Tracking
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PWWBMVQTSERVBXSXCZVUKIMEDNQUQ7O3/ Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDCMYQ3J45NHQ4EJREM3BJNNKB5BK4Y7/ Mailing List
Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
History

19 Dec 2024, 17:53

Type Values Removed Values Added
First Time Google chrome
Fedoraproject fedora
Google
Fedoraproject
CPE cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 8.8 		v2 : unknown
v3 : 5.4
CWE NVD-CWE-noinfo
References () https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html - () https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html - Release Notes
References () https://issues.chromium.org/issues/41485789 - () https://issues.chromium.org/issues/41485789 - Exploit, Issue Tracking
References () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PWWBMVQTSERVBXSXCZVUKIMEDNQUQ7O3/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PWWBMVQTSERVBXSXCZVUKIMEDNQUQ7O3/ - Mailing List
References () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDCMYQ3J45NHQ4EJREM3BJNNKB5BK4Y7/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDCMYQ3J45NHQ4EJREM3BJNNKB5BK4Y7/ - Mailing List
Information

Published : 2024-02-21 04:15

Updated : 2024-12-19 17:53

NVD link : CVE-2024-1672

Mitre link : CVE-2024-1672

CVE.ORG link : CVE-2024-1672

JSON object : View

Products Affected

google

  • chrome

fedoraproject

  • fedora
CWE
NVD-CWE-noinfo CWE-474

Use of Function with Inconsistent Implementations