NetSight
IP …
medium6.1

CVE-2020-6535

Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compromised the renderer process to inject scrip…

Impact

Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page.

Affected products

VendorProductAffected versions
GoogleChrome
before 84.0.4147.89
OpensuseBackports Sle
Version 15.0
DebianDebian Linux
Version 10.0
FedoraprojectFedora
Versions 31, 32
OpensuseLeap
Versions 15.1, 15.2

Weakness classification

CWE-79

References