CVE-2023-4078: Inappropriate implementation in Extensions
Chromium: CVE-2023-4078 Inappropriate implementation in Extensions
Other sources
Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: Medium)
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-4078?
CVE-2023-4078 has been rated as a high-severity vulnerability affecting multiple Chromium-based browsers including Google Chrome and Microsoft Edge.
How do I fix CVE-2023-4078?
To fix CVE-2023-4078, users should update their Google Chrome or Microsoft Edge browsers to the latest version.
Which versions are affected by CVE-2023-4078?
CVE-2023-4078 affects Google Chrome versions up to 115.0.5790.170 and Microsoft Edge versions up to 115.0.1901.200.
Is CVE-2023-4078 present in Debian's Chromium package?
Yes, CVE-2023-4078 is present in Debian's Chromium package up to version 90.0.4430.212-1~deb10u1.
What browsers are affected by CVE-2023-4078?
CVE-2023-4078 affects Chromium-based browsers, including Google Chrome and Microsoft Edge.