CVE-2023-0704
Medium · 6.5CVSS
6.5
EPSS
1.0%
Published
Feb 7, 2023
CISA due date
—
Cloudanix analysis
There is not enough information available to understand what this issue does or whether it affects any systems.
- Exploitation
- Other
- Attacker needs
- Other
- Complexity
- Theoretical
- Impact
- Other
- Component
- Other
- Class
- Other
- Remediation
- Other
- Effort
- Other
- Patch risk
- Other
What it actually does
No technical description or affected components provided; impact cannot be determined from supplied data.
Why it matters to the business
Unknown exposure with low observed exploitation probability and no known active campaigns; limited operational urgency based on available metrics.
How an attack unfolds
No exploitation path can be constructed due to absent vulnerability details and no reported threat actor activity.
How to fix it
Monitor for future updates; no fixed versions or affected products listed to guide patching.
How to confirm the fix worked
Re-query CVE data sources once description and product mappings become available.
How to detect it
No log sources or artifacts can be identified without a description of the flaw.
What your security team should do
- Track EPSS trend for any upward movement beyond current low baseline.
- Include CVE in routine vulnerability scanning once product scope is known.
- Review KEV status periodically given 1347 days since publication.
The record
Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings via a crafted HTML page. (Chromium security severity: Low)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | chromium | 0 | No fix |
| Debian:11 | chromium | 0 | 110.0.5481.77-1~deb11u1 |
| Debian:12 | chromium | 0 | 110.0.5481.77-1 |
| Debian:13 | chromium | 0 | 110.0.5481.77-1 |
| Debian:14 | chromium | 0 | 110.0.5481.77-1 |
| SUSE:Package Hub 15 SP4 | chromium | 0 | 110.0.5481.77-bp154.2.67.1 |
| Ubuntu:18.04:LTS | chromium-browser | 0 | 110.0.5481.100-0ubuntu0.18.04.1 |
| openSUSE:Leap 15.4 | chromium | 0 | 110.0.5481.77-bp154.2.67.1 |
| openSUSE:Leap 15.4 NonFree | opera | 0 | 96.0.4693.20-lp154.2.41.1 |
| openSUSE:Leap 15.5 NonFree | opera | 0 | 99.0.4788.13-lp155.3.6.1 |
| openSUSE:Tumbleweed | chromium | 0 | 110.0.5481.77-1.1 |
| openSUSE:Tumbleweed | chromium | 0 | 113.0.5672.92-1.1 |
Related vulnerabilities
- CVE-2023-0698 Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote… Also affects chromium
- CVE-2022-2160 Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to… Also affects chromium
- CVE-2021-21215 Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a… Also affects chromium
- CVE-2021-21224 Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to… Also affects chromium
- CVE-2021-21216 Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a… Also affects chromium
- CVE-2021-21193 Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker… Also affects chromium
- CVE-2021-21177 Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72… Also affects chromium
- CVE-2021-21166 Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to… Also affects chromium