CVE-2019-13710

published 2019-11-25

CVE-2019-13710: Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a…

medium 4.3 CVSS 3.1

AV N AC L PR N UI R S U C N I L A N

Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
chromium	chromium	>= 0 < 78.0.3904.87-1	78.0.3904.87-1
chromium	chromium	>= 0 < 78.0.3904.87-1	78.0.3904.87-1
chromium	chromium	>= 0 < 78.0.3904.87-1	78.0.3904.87-1
chromium	chromium	>= 0 < 78.0.3904.87-1	78.0.3904.87-1
debian	chromium	< chromium 78.0.3904.87-1 (bookworm)	chromium 78.0.3904.87-1 (bookworm)
google	chrome	< 78.0.3904.70	78.0.3904.70
google	chrome	>= unspecified < 78.0.3904.70	78.0.3904.70
google	chrome_chrome	—	—
opensuse	backports_sle	—	—

CVSS provenance

nvd v3.1 4.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

osv 4.3 MEDIUM