CVE-2019-13704: Medium severity google chrome (trace event) vulnerability
Published Nov 25, 2019
·Updated
Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page.
Affected Software
2 affected components
Google Chrome<78.0.3904.70
openSUSE Backports=15.0-sp1
Event History
Nov 25, 2019
CVE Published
via MITRE·02:22 PM
Data Sourced
via MITRE·02:22 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-13704?
CVE-2019-13704 has been classified with a high severity level due to its potential impact on security policies.
2
How do I fix CVE-2019-13704?
To remediate CVE-2019-13704, update Google Chrome to version 78.0.3904.70 or later.
3
Who is affected by CVE-2019-13704?
CVE-2019-13704 affects users of Google Chrome versions prior to 78.0.3904.70 and openSUSE Backports 15.0-sp1.
4
What type of vulnerability is CVE-2019-13704?
CVE-2019-13704 is an insufficient policy enforcement vulnerability that allows attackers to bypass content security policies.
5
Are there any workarounds for CVE-2019-13704?
There are no recommended workarounds for CVE-2019-13704; the best course of action is to apply the necessary updates.