description: Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
problem types: Insufficient policy enforcement
affected:
{
vendor: Google
product: Chrome
versions:
version: unspecified, lessThan: 109.0.5414.74, status: affected, versionType: custom
}