Lucene search
+L

24 matches found

NVD
NVD
•added 2024/03/11 10:15 p.m.•35 views

CVE-2024-28120

codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-chrome extension doesn't check the sender when receiving an external message. This allows an attacker to host a website that will steal the user's Codeium api-key, and thus...

7.5CVSS6.5AI score0.00647EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/03/11 9:14 p.m.•47 views

CVE-2024-28120 API key leak in codeium-chrome

codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-chrome extension doesn't check the sender when receiving an external message. This allows an attacker to host a website that will steal the user's Codeium api-key, and thus...

6.5CVSS6.8AI score0.00647EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2024/03/11 9:14 p.m.•27 views

CVE-2024-28120 API key leak in codeium-chrome

codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-chrome extension doesn't check the sender when receiving an external message. This allows an attacker to host a website that will steal the user's Codeium api-key, and thus...

6.5CVSS6.5AI score
SaveExploits0References4
Mend
Mend
•added 2024/03/11 9:14 p.m.•7 views

CVE-2024-28120

codeium-chrome is an open source code completion plugin for the chrome web browser. The service worker of the codeium-chrome extension doesn't check the sender when receiving an external message. This allows an attacker to host a website that will steal the user's Codeium api-key, and thus...

7.5CVSS0.00647EPSS
SaveExploits1References4
Rows per page
Query Builder