Security Advisory

CVE-2023-1232

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-03-07 21:42:18
Last updated 2024-10-10 19:18:23
Assigner Chrome
State PUBLISHED

Description

Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. (Chromium security severity: Low)