Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
CWE-352: Cross-Site Request Forgery (CSRF) - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
> HISTORIQUE DES MODIFICATIONS
Première apparition
29/09/2026 18:17
Source: NVD
📊
ENRICHISSEMENT
01/10/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-352: Cross-Site Request Forgery (CSRF) - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could hav...
Total des modifications: 1
Dernière mise à jour: 3 weeks ago