CVE-2019-5830: Medium severity Google Chrome vulnerability
Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Event History
Frequently Asked Questions
What is CVE-2019-5830?
CVE-2019-5830 is a vulnerability in Google Chrome prior to version 75.0.3770.80 that allows a remote attacker to leak cross-origin data via a crafted HTML page.
Which software versions are affected by CVE-2019-5830?
Google Chrome versions prior to 75.0.3770.80, Opensuse Backports sle-15, openSUSE Leap 15.0, openSUSE Leap 15.1, openSUSE Leap 42.3, Debian Debian Linux 10.0, Fedoraproject Fedora 29, Fedoraproject Fedora 30, and debian/chromium package versions 90.0.4430.212-1~deb10u1, 116.0.5845.180-1~deb11u1, 118.0.5993.117-1~deb11u1, 116.0.5845.180-1~deb12u1, 118.0.5993.117-1~deb12u1, 118.0.5993.117-1, and 119.0.6045.105-1 are affected.
What is the severity of CVE-2019-5830?
The severity of CVE-2019-5830 is medium with a CVSS score of 6.5.
How can I fix CVE-2019-5830 in Google Chrome?
Update Google Chrome to version 75.0.3770.80 or later to fix CVE-2019-5830.
How can I fix CVE-2019-5830 in other affected software?
For other affected software, update to the recommended versions provided by the respective vendors.