Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass Downloads restrictions via a crafted HTML page. (Chromium security severity: Medium)
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "chromium-browser",
"binary_version": "108.0.5359.71-0ubuntu0.18.04.5"
},
{
"binary_name": "chromium-browser-l10n",
"binary_version": "108.0.5359.71-0ubuntu0.18.04.5"
},
{
"binary_name": "chromium-chromedriver",
"binary_version": "108.0.5359.71-0ubuntu0.18.04.5"
},
{
"binary_name": "chromium-codecs-ffmpeg",
"binary_version": "108.0.5359.71-0ubuntu0.18.04.5"
},
{
"binary_name": "chromium-codecs-ffmpeg-extra",
"binary_version": "108.0.5359.71-0ubuntu0.18.04.5"
}
]
}