Chromedriver Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Chromedriver Project records in CISA KEV

No Chromedriver Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Chromedriver 2 records HIGH

Records

2 records

TI-2023-11380 CVE-2023-26156 · GHSA-hm92-vgmw-qfmx

OS command injection in chromedriver

HIGH 66

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02233 Published 2023-11-09 Fixed in 119.0.1 CWE-78

TI-2016-08620 CVE-2016-10579 · GHSA-jh5w-6964-x5cf

Cryptographic flaw in HackerOne chromedriver node module

LOW 37

Chromedriver is an NPM wrapper for selenium ChromeDriver.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01097 Published 2018-06-01 Fixed in 2.26.1, 2.25.2 CWE-311

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0