peter bassill · operator
$ cve CVE-2020-6519 JSON

CVE-2020-6519 EXPLOIT

6.5
MEDIUM · CVSS 3.1 · EPSS 10.3% (pctl 96)

Patch early

A public exploit exists.

Description

Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.

Scoring

CVSS6.5 (MEDIUM, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS10.27% — more likely to be exploited than 96% of all CVEs
On CISA KEVno
Public exploityes
Published2020-07-22
Last modified2026-06-17

Affected (5)

VendorProduct
debiandebian linux
fedoraprojectfedora
googlechrome
opensusebackports sle
opensuseleap

Public exploits

SourceTitleDate
exploit-dbChromium 83 - Full CSP Bypass2020-12-04

References

→ the Explorer  ·  watch your stack  ·  NVD