undefined | Better HN

0 pointsmhh__5y ago0 comments

What kind of exploits? Was the browser not isolated at all or was it (say) sandbox-escaping via the JS?

0 comments

dleslie5y ago

We posted this:

https://medium.com/@vrchat/security-update-web-panels-4699fa...

It was severe enough that I ripped them out, though we were unable to find any evidence of the vulnerability in use.

mmmkkaaayy5y ago

But what was the vulnerability? It's not mentioned in the post.

dleslie5y ago

It's been a few years, and I can't recall the specifics with certainty. It was a serious Chromium SVE that was unpatched in the middleware we were using.

j / k navigate · click thread line to collapse

0 comments

dleslie5y ago

We posted this:

https://medium.com/@vrchat/security-update-web-panels-4699fa...

It was severe enough that I ripped them out, though we were unable to find any evidence of the vulnerability in use.

mmmkkaaayy5y ago

But what was the vulnerability? It's not mentioned in the post.

dleslie5y ago

It's been a few years, and I can't recall the specifics with certainty. It was a serious Chromium SVE that was unpatched in the middleware we were using.

j / k navigate · click thread line to collapse