CVE-2022-3875

Affected software: Click Studios Passwordstate and Passwordstate Browser Extension Chrome. CVE-2022-3875 describes an authentication bypass in the API caused by issues in the API code (unknown code path) that can be exploited remotely. The vulnerability is exploitable by an unauthenticated remote...

CVE-2022-3877

CVE-2022-3877 affects Click Studios Passwordstate and Passwordstate Browser Extension Chrome. The issue is a vulnerability in an unknown function of the URL Field Handler that enables cross-site scripting. It can be triggered remotely, and public disclosures exist describing the exploit. A fix is...

CVE-2022-3876

CVE-2022-3876 affects Click Studios Passwordstate and Passwordstate Browser Extension Chrome. The vulnerability lies in the API path /api/browserextension/UpdatePassword/ where manipulating the PasswordID argument bypasses authorization. The attack may be initiated remotely and the exploit has be...