CVE-2023-0141: Insufficient policy enforcement in CORS
Published Sep 12, 2022
·Updated
Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
Credit
scarlet
Affected Software
2 affected componentsFixes available
Google Chrome<109.0.5414.74
109.0.5414.74
Google Chrome<109.0.5414.74
Event History
Sep 12, 2022
CVE Published
12:00 AM
Jan 10, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2023-0141?
CVE-2023-0141 has a severity rating of Low according to Chromium security assessments.
2
How do I fix CVE-2023-0141?
To mitigate CVE-2023-0141, users should update Google Chrome to version 109.0.5414.74 or later.
3
What type of vulnerability is CVE-2023-0141?
CVE-2023-0141 is classified as an insufficient policy enforcement vulnerability in the CORS implementation of Google Chrome.
4
Who is affected by CVE-2023-0141?
CVE-2023-0141 affects Google Chrome versions prior to 109.0.5414.74.
5
Can CVE-2023-0141 allow data leakage?
Yes, CVE-2023-0141 allows a remote attacker to leak cross-origin data via a crafted HTML page.