CVE-2018-20071

Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install…

published January 9, 2019

CVSS
—
EPSS
0%
Percentile
31.0
In the wild
Unconfirmed
What it is

Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install a service worker for a domain that can host attacker controled files via a crafted HTML page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00384 · 31.0th percentile
Published
2019-01-09T19:00Z
EPSS history
Timeline
  • 09 JAN 19:00Z
    Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install…
    cvelistv5