Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to access data on the user file system without explicit consent via a crafted HTML page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google Chrome 信息泄露漏洞
Vulnerability Description
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。 Google Chrome 66.0.3359.117之前版本中存在安全漏洞，该漏洞源于在File API中，‘readAsText()’函数会多次读取用户选中的文件。远程攻击者可借助特制的HTML页面利用该漏洞未经同意访问用户文件系统上的数据。
CVSS Information
N/A
Vulnerability Type
N/A