Wind River Support Network

HomeDefectsLIN1022-1410

Fixed

LIN1022-1410 : Security Advisory - chromium-x11 - CVE-2022-2861

Created: Aug 22, 2022 Updated: Oct 20, 2022

Resolved Date: Sep 17, 2022

Previous ID: LINCD-10080

Found In Version: 10.22.33.2

Fix Version: 10.22.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts into WebUI via a crafted HTML page.

https://nvd.nist.gov/vuln/detail/CVE-2022-2861

CVEs

CVE-2022-2861