Authorization

2022-12-1911:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

click studios

passwordstate

browser extension

chrome

api

authorization bypass

remote exploit

upgrade

vdb-216245.

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.3%

JSON

A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This issue affects some unknown processing of the file /api/browserextension/UpdatePassword/ of the component API. The manipulation of the argument PasswordID leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The identifier VDB-216245 was assigned to this vulnerability.