Access Restriction Bypass Affecting chromium package, versions [,103.0.5060.53)
Snyk CVSS
Attack Complexity
High
User Interaction
Required
Threat Intelligence
EPSS
0.13% (48th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-UNMANAGED-CHROMIUM-2961651
- published 28 Jul 2022
- disclosed 28 Jul 2022
- credit José Miguel Moreno Computer Security Lab
Introduced: 28 Jul 2022
CVE-2022-2164 Open this link in a new tabHow to fix?
Upgrade chromium to version 103.0.5060.53 or higher.
Overview
Affected versions of this package are vulnerable to Access Restriction Bypass due to inappropriate implementation in Extensions API, which allows an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML page.