Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2023-0704
PUBLISHED
More InfoOfficial Page
Assigner-Chrome
Assigner Org ID-ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28
View Known Exploited Vulnerability (KEV) details
Published At-07 Feb, 2023 | 00:00
Updated At-20 Mar, 2025 | 20:53
Rejected At-
▼CVE Numbering Authority (CNA)

Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings via a crafted HTML page. (Chromium security severity: Low)

Affected Products
Vendor
Google LLCGoogle
Product
Chrome
Versions
Affected
  • From unspecified before 110.0.5481.77 (custom)
Problem Types
TypeCWE IDDescription
textN/AInsufficient policy enforcement
Type: text
CWE ID: N/A
Description: Insufficient policy enforcement
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html
N/A
https://crbug.com/1385982
N/A
https://security.gentoo.org/glsa/202309-17
vendor-advisory
Hyperlink: https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html
Resource: N/A
Hyperlink: https://crbug.com/1385982
Resource: N/A
Hyperlink: https://security.gentoo.org/glsa/202309-17
Resource:
vendor-advisory
▼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html
x_transferred
https://crbug.com/1385982
x_transferred
https://security.gentoo.org/glsa/202309-17
vendor-advisory
x_transferred
Hyperlink: https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html
Resource:
x_transferred
Hyperlink: https://crbug.com/1385982
Resource:
x_transferred
Hyperlink: https://security.gentoo.org/glsa/202309-17
Resource:
vendor-advisory
x_transferred
2. CISA ADP Vulnrichment
Affected Products
Problem Types
TypeCWE IDDescription
CWECWE-602CWE-602 Client-Side Enforcement of Server-Side Security
Type: CWE
CWE ID: CWE-602
Description: CWE-602 Client-Side Enforcement of Server-Side Security
Metrics
VersionBase scoreBase severityVector
3.16.5MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Version: 3.1
Base score: 6.5
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found