Exploit for #VU29864 Improper access control in Google Chrome

Vulnerability identifier: #VU29864

Vulnerability risk: Medium

CVSSv4.0: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A/U:Green]

CVE-ID: CVE-2020-6519

CWE-ID: CWE-284

Exploitation vector: Network

Exploits in database: 3

• June 17, 2021
  • Chromium 83 - Full CSP Bypass [Exploit-DB]
• December 7, 2020
  • Chromium 83 CSP Bypass [Packet Storm]
• September 1, 2020
  • CVE-2020-6519 () [Github]

Vulnerable software:
Google Chrome
Client/Desktop applications / Web browsers

Vendor: Google