Advisories · Technology

Click Studios Passwordstate.

Every CVE that names Click Studios Passwordstate among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-4613 CVE record

CVSS 5.0 Medium

Click Studios Passwordstate Browser Extension Provisioning improper authorization
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- Privilege escalation
Not analysed yet 19 Dec 2022
CVE-2022-4612 CVE record

CVSS 4.3 Medium

Click Studios Passwordstate insufficiently protected credentials
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- Hard-coded credentials
Not analysed yet 19 Dec 2022
CVE-2022-4611 CVE record

CVSS 4.3 Medium

Click Studios Passwordstate hard-coded credentials
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- Hard-coded credentials
Not analysed yet 19 Dec 2022
CVE-2022-4610 CVE record

CVSS 1.9 Low

Click Studios Passwordstate risky encryption
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- CWE-310
Not analysed yet 19 Dec 2022
CVE-2022-3877 CVE record

CVSS 3.5 Low

Click Studios Passwordstate URL Field cross site scripting
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- CWE-707
Not analysed yet 19 Dec 2022
CVE-2022-3876 CVE record

CVSS 4.3 Medium

Click Studios Passwordstate API authorization
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- Privilege escalation
Not analysed yet 19 Dec 2022
CVE-2022-3875 CVE record

CVSS 7.3 High

Click Studios Passwordstate API authentication bypass by assumed-immutable data
- Click Studios Passwordstate
- Click Studios Passwordstate Browser Extension Chrome
- CWE-302
Not analysed yet 19 Dec 2022