Command injection

2022-11-0713:15:00

PRIOn knowledge base

www.prio-n.com

passwork extension

chrome

command injection

cleartext credentials

nvd

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.6%

The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain cleartext cached credentials.

CPENameOperatorVersion
passworkeq5.0.9

CPE	Name	Operator	Version
	passwork	eq	5.0.9

References

chrome.google.com/webstore/detail/passwork-self-hosted/ibiipnmmlnehmeonnhbdajcfagcgihkl

passwork.canny.io/changelog/version-5110