CVE-2021-4323

Description

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to access local files via a crafted Chrome Extension. (Chromium security severity: Medium)

References

https://lists.fedoraproject.org/archives/list/[email protected]/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-34152

https://crbug.com/1176031

https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS