Loading HuntDB...

GHSA-vh8p-64fr-j7xq

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.

Related CVEs

Key Information

GHSA ID
GHSA-vh8p-64fr-j7xq
Published
May 13, 2022 1:22 AM
Last Modified
May 13, 2022 1:22 AM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 13, 2025 6:24 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.