Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install a service worker for a domain that can host attacker controled files via a crafted HTML page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google Chrome Payments 跨站脚本漏洞
Vulnerability Description
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。Payments是其中的一个支付组件。 Google Chrome 70.0.3538.67之前版本中的Payments存在安全漏洞，该漏洞源于程序没有严格进行来源检测。远程攻击者可借助特制的HTML页面利用该漏洞安装service worker。
CVSS Information
N/A
Vulnerability Type
N/A