Threats tagged 'ghsa-f7c2-jg68-74fm'

A confused deputy vulnerability in Google Chrome DevTools prior to version 154.0.8037.57 allows a remote attacker to bypass the web origin policy via a crafted HTML page using social engineering techniques. The issue has a CVSS score of 4.3, indicating medium severity, and does not impact confidentiality or availability but can cause limited integrity loss. Google has released an update to address this vulnerability.