CVE-2023-5484: Inappropriate implementation in Navigation
Chromium: CVE-2023-5484 Inappropriate implementation in Navigation
Other sources
Inappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium)
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 120.0.6099.129-1~deb11u1Fixed in 119.0.6045.199-1~deb12u1Fixed in 120.0.6099.129-1~deb12u1Fixed in 120.0.6099.129-1 - Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 118.0.5993.70 - Upgrade
Upgrade
alpine/qt6-qtwebengineto a version that resolves this vulnerability.Fixed in 6.6.0-r1 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 118.0.5993.70
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-5484.
What is the severity of CVE-2023-5484?
CVE-2023-5484 has a severity level of Medium.
What is the affected software?
The affected software is Google Chrome versions prior to 118.0.5993.70.
How does CVE-2023-5484 work?
CVE-2023-5484 allows a remote attacker to spoof security UI via a crafted HTML page by exploiting an inappropriate implementation in Navigation in Google Chrome.
How can I fix CVE-2023-5484?
To fix CVE-2023-5484, update Google Chrome to version 118.0.5993.70 or later.