VULNERABILITY INTELLIGENCE

CVE-2023-2465

CVSS score4.3 MEDIUM

EPSS probability0.97%

CISA KEVNot currently listed

Published2023-05-03

Last modified2026-06-17

Description

Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)