CVE-2018-20071

Published: 2019-01-09T19:29Z

Last Modified: 2024-11-21T04:00Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install a service worker for a domain that can host attacker controled files via a crafted HTML page. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt