CVE-2023-1813: Inappropriate implementation in Extensions
Chromium: CVE-2023-1813 Inappropriate implementation in Extensions
Other sources
Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-1813?
CVE-2023-1813 has been classified as a high-severity vulnerability due to its potential impact on security.
How do I fix CVE-2023-1813?
To fix CVE-2023-1813, update your Chromium-based browser or Microsoft Edge to the latest version released by the vendor.
Which software is affected by CVE-2023-1813?
CVE-2023-1813 affects Chromium and Chromium-based browsers including Google Chrome and Microsoft Edge.
Is there a workaround for CVE-2023-1813?
There are no known workarounds for CVE-2023-1813; updating to a patched version is recommended.
When was CVE-2023-1813 disclosed?
CVE-2023-1813 was disclosed in 2023 as part of security updates for Chromium and its derivatives.