Security bypass vulnerability in Debugger extension API in Google Chrome via an extension that uses a restricted URL (deb)| ID: oval:org.secpod.oval:def:20950 | Date: (C)2014-09-01 (M)2023-11-16 |
| Class: VULNERABILITY | Family: unix |
The host is installed with Google Chrome before 37.0.2062.94 and is prone to security bypass vulnerability. A flaw is present in the application, which does not validate a tab's URL before an attach operation. Successful exploitation allow attackers to bypass intended access limitations.
