CVE-2024-5500: Inappropriate Implementation in Sign-In
Inappropriate implementation in Sign-In in Google Chrome prior to 1.3.36.351 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 122.0.6261.57 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 1.3.36.351
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-5500?
CVE-2024-5500 has a medium severity rating as per Chromium security standards.
How do I fix CVE-2024-5500?
To fix CVE-2024-5500, update Google Chrome to version 122.0.6261.57 or later.
What does CVE-2024-5500 affect?
CVE-2024-5500 affects Google Chrome versions prior to 122.0.6261.57.
Can CVE-2024-5500 be exploited remotely?
Yes, a remote attacker can exploit CVE-2024-5500 through a crafted HTML page.
What are the implications of CVE-2024-5500?
CVE-2024-5500 allows attackers to bypass navigation restrictions, potentially compromising user security.