Bug 833160

Summary:	www-apps/chromedriver-bin: CSRF to code execution
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	trivial	CC:	zmedico
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugs.chromium.org/p/chromium/issues/detail?id=1100097
Whiteboard:	~2 [upstream]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2022-02-12 04:31:46 UTC

"chromedriver is vulnerable to Cross-Site Request Forgery.
This vulnerability can be exploited for remote
code execution"

The upstream bug is WONTFIX'd, not sure there's anything we can do.