CVE-2020-6489: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-6489 is a low severity vulnerability discovered in Google Chrome's developer tools prior to version 83.0.4103.61. The vulnerability was reported by @lovasoa (Ophir LOJKINE) on February 10, 2020, and was publicly disclosed on May 21, 2020 (Chrome Release).

The vulnerability stems from an inappropriate implementation in developer tools in Google Chrome that could allow a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page. The vulnerability has been assigned a CVSS v3.1 base score of 4.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N (NVD).

If exploited, this vulnerability could allow an attacker to access potentially sensitive information stored on disk, but only after convincing a user to take specific actions in the developer tools. The attack requires user interaction and only results in information disclosure without any system modification capabilities (NVD).

The vulnerability requires user interaction and can be exploited remotely. The attacker needs to craft a specific HTML page and convince the user to perform certain actions in the developer tools to successfully exploit the vulnerability (Gentoo Security).

The vulnerability has been fixed in Google Chrome version 83.0.4103.61 and later. Users are advised to upgrade to the latest version of Chrome. Various Linux distributions have also released patches, including Debian (83.0.4103.116-1~deb10u1), Fedora, and Gentoo (Debian Security, Gentoo Security).