Google characterized the medium-severity issue (CVE-2022-3656) as a case of insufficient data validation in File System
Experts Detail Chromium Browser Security Flaw Putting Confidential Data at Risk
Ravie Lakshmanan with The Hacker News reports:
Details have emerged about a now-patched vulnerability in Google Chrome and Chromium-based browsers that, if successfully exploited, could have made it possible to siphon files containing confidential data.
“The issue arose from the way the browser interacted with symlinks when processing files and directories,” Imperva researcher Ron Masas said. “Specifically, the browser did not properly check if the symlink was pointing to a location that was not intended to be accessible, which allowed for the theft of sensitive files.”
Google characterized the medium-severity issue (CVE-2022-3656) as a case of insufficient data validation in File System, releasing fixes for it in versions 107 and 108 released in October and November 2022.
You may also like:
The Now Proven Farce of JUNK DNA Supports the Word of God
Ramifications of DNA Data Breach is a Huge Wake Up Call
Google Settles $5 Billion Privacy Lawsuit Over Tracking Users in ‘Incognito Mode’
Incompetent AT&T Has Largest Dark Web Data Leak In Their Company’s History, Social Security Numbers Revealed
