Threats tagged 'ghsa-68xh-x3xv-j37f'

A vulnerability in Google Chrome DevTools prior to version 148.0.7778.96 allows an attacker who convinces a user to install a malicious extension to leak cross-origin data. The issue is due to insufficient policy enforcement in DevTools. The vulnerability has a low severity rating from Chromium security and a CVSS score of 4.3, indicating limited impact primarily on confidentiality.