Advisories · Technology

Click Studios Passwordstate Browser Extension Chrome.

Every CVE that names Click Studios Passwordstate Browser Extension Chrome among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-4613 CVE record

CVSS 5.0 Medium

Click Studios Passwordstate Browser Extension Provisioning improper authorization
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- Privilege escalation
Not analysed yet 19 Dec 2022
CVE-2022-4612 CVE record

CVSS 4.3 Medium

Click Studios Passwordstate insufficiently protected credentials
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- Hard-coded credentials
Not analysed yet 19 Dec 2022
CVE-2022-4611 CVE record

CVSS 4.3 Medium

Click Studios Passwordstate hard-coded credentials
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- Hard-coded credentials
Not analysed yet 19 Dec 2022
CVE-2022-4610 CVE record

CVSS 1.9 Low

Click Studios Passwordstate risky encryption
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- CWE-310
Not analysed yet 19 Dec 2022
CVE-2022-3877 CVE record

CVSS 3.5 Low

Click Studios Passwordstate URL Field cross site scripting
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- CWE-707
Not analysed yet 19 Dec 2022
CVE-2022-3876 CVE record

CVSS 4.3 Medium

Click Studios Passwordstate API authorization
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- Privilege escalation
Not analysed yet 19 Dec 2022
CVE-2022-3875 CVE record

CVSS 7.3 High

Click Studios Passwordstate API authentication bypass by assumed-immutable data
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- CWE-302
Not analysed yet 19 Dec 2022