PassPortal Chrome Extension Vulnerability
CVE-2023-47131

7.5HIGH

Key Information:

Vendor

N-able

Status
Passportal
Vendor
CVE Published:
8 February 2024

What is CVE-2023-47131?

The N-able PassPortal extension for Chrome versions before 3.29.2 is susceptible to a vulnerability that allows the unintentional logging of sensitive user information. This oversight can lead to unauthorized access to confidential data, posing significant risks to users' security and privacy. Proper management and updates are crucial for mitigating this vulnerability and protecting against potential data breaches.

References

https://me.n-able.com/s/security-advisory/aArHs000000M8CC...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-47131 : PassPortal Chrome Extension Vulnerability