Google Chrome < 188.8.131.52 Same Origin Policy Bypass Vulnerability
Medium Nessus Network Monitor Plugin ID 5004
SynopsisThe remote host contains a web browser that is affected by a same origin bypass vulnerability.
DescriptionThe version of Google Chrome installed on the remote host is earlier than 184.108.40.206. Such versions are reportedly affected by a same origin policy bypass vulnerability when handling URLS with a 'chromehtml: ' protocol which could allow an attacker to run scripts of his choosing on any page or enumerate files on the local disk.
If a user has Google Chrome installed, visiting an attacker-controlled web page in another browser could cause Google Chrome to launch, open multiple tabs, and load scripts that run after navigating to a URL of the attacker's choice (Issue number 9860).
SolutionUpgrade to Google Chrome 220.127.116.11.