NetSight
IP …
medium4.3

CVE-2020-6392

Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension …

Impact

Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.

Affected products

VendorProductAffected versions
GoogleChrome
before 80.0.3987.87
OpensuseBackports Sle
Version 15.0
FedoraprojectFedora
Versions 30, 31
DebianDebian Linux
Versions 9.0, 10.0
SusePackage Hub
All versions
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Workstation
Version 6.0

Weakness classification

CWE-79

References