Back to the CVE list
CVE-2023-4357

Chromium: CVE-2023-4357 Insufficient validation of untrusted input in XML

CVSS score

—

EPSS probability

%47.1

Risk score

—

Published

3 y ago

OverviewPublic Exploits (9)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
shihongsu/NetSec-CVE-2023-4357
GitHub

shihongsu/NetSec-CVE-2023-4357

Public PoCSource updated: 02.09.2026 02:36:54
G
xcanwin/CVE-2023-4357-Chrome-XXE
GitHub

[漏洞复现] 全球首款单文件利用 CVE-2023-4357 Chrome XXE 漏洞 EXP, 实现对访客者本地文件窃取. Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors.

Public PoCSource updated: 11.10.2026 13:39:40
G
CamillaFranceschini/CVE-2023-4357
GitHub

CamillaFranceschini/CVE-2023-4357

Public PoCSource updated: 20.06.2024 13:20:56
G
lon5948/CVE-2023-4357-Exploitation
GitHub

Network Security Project

Public PoCSource updated: 04.10.2025 17:43:22
G
WinnieZy/CVE-2023-4357
GitHub

WinnieZy/CVE-2023-4357

Public PoCSource updated: 04.10.2025 17:43:17
G
sunu11/chrome-CVE-2023-4357
GitHub

poc

Public PoCSource updated: 02.10.2025 16:34:08
G
passwa11/CVE-2023-4357-APT-Style-exploitation
GitHub

passwa11/CVE-2023-4357-APT-Style-exploitation

Public PoCSource updated: 21.11.2023 05:39:35
G
xcanwin/CVE-2023-4357-Chrome-LFI
GitHub

Chrome任意文件读取漏洞POC (★0)

Public PoCSource updated: 17.11.2023 20:10:23
G
OgulcanUnveren/CVE-2023-4357-APT-Style-exploitation
GitHub

Apt style exploitation of Chrome 0day CVE-2023-4357 (★0)

Public PoCSource updated: 20.11.2023 07:21:35

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-4357"