Vulnerability CVE-2024-3847: Information

Description

Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)

Published: April 17, 2024
Modified: May 3, 2024

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
chromiumsisyphus124.0.6367.60-alt1124.0.6367.207-alt1ALT-PU-2024-7078-1345568Fixed
chromiumsisyphus_loongarch64124.0.6367.78-alt1.0.port124.0.6367.78-alt1.0.portALT-PU-2024-7373-1-Fixed
chromium-gostsisyphus124.0.6367.78-alt1124.0.6367.78-alt1ALT-PU-2024-7309-1347217Fixed

References to Advisories, Solutions, and Tools