Okta Browser Plugin Vulnerable to Cross-Site Scripting
CVE-2024-0981

Currently unrated

Key Information:

Vendor

Okta

Vendor
CVE Published:
23 July 2024

Badges

👾 Exploit Exists📰 News Worthy

What is CVE-2024-0981?

Okta Browser Plugin versions 6.5.0 through 6.31.0 (Chrome/Edge/Firefox/Safari) are vulnerable to cross-site scripting. This issue occurs when the plugin prompts the user to save these credentials within Okta Personal. A fix was implemented to properly escape these fields, addressing the vulnerability. Importantly, if Okta Personal is not added to the plugin to enable multi-account view, the Workforce Identity Cloud plugin is not affected by this issue. The vulnerability is fixed in Okta Browser Plugin version 6.32.0 for Chrome/Edge/Safari/Firefox.

News Articles

favicon imageCybersecurityNews

Okta Browser Plugin Vulnerable To Reflected Cross-Site Scripting Attacks

Okta Browser Plugin is available in multiple Browsers like Edge, Chrome, Safari and Firefox. Combining all these browsers together, the

References

https://trust.okta.com/security-advisories/okta-browser-p...

Timeline

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by CybersecurityNews

  • Vulnerability published

JSON
.