Description
Google Chrome是美国谷歌（Google）公司的一款Web浏览器。 Google Chrome 116.0.5845.96 之前版本存在安全漏洞，该漏洞源于XML 中输入验证不充分，允许远程攻击者通过精心设计的 HTML 页面绕过文件访问限制。
Chromium libxslt XXE漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE
https://blog.csdn.net/shaotaiban1097/article/details/134509544
https://t0ngmystic.com/sec/cve-2023-4357-chrome-xxe%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96/
https://rivers.chaitin.cn/vuldb/c89c74ec-b4b5-4c80-9e60-6541c706e5b6
https://www.isisy.com/1522.html
https://cn-sec.com/archives/2224207.html
https://cloud.tencent.com/developer/article/2361214
https://medium.com/@tvvzvpb186/chromium-xxe-flaw-exposes-local-files-cve-2023-4357-081db8b0e800
https://swarm.ptsecurity.com/xxe-chrome-safari-chatgpt/
https://issues.chromium.org/40066577