Google Chrome Vulnerability: CVE-2023-1221 Insufficient policy enforcement in Extensions API

Google Chrome Vulnerability: CVE-2023-1221 Insufficient policy enforcement in Extensions API

Severity

4

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

03/08/2023

Created

03/09/2023

Added

03/08/2023

Modified

01/28/2025

Description

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Solution(s)

• google-chrome-upgrade-latest

References

• https://attackerkb.com/topics/cve-2023-1221
• CVE - 2023-1221