Vulnerabilities
7 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2023-49949 | Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes. Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes. NVD description · AI analysis pending | 8.1 | <1% | PoC |
| — | |
| CVE-2022-42956 +1 in the same advisory: …42955 | The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password. The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password. NVD description · AI analysis pending | 7.5 | <1% |
| — | ||
| CVE-2022-25267 | Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal (to upload files). Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal (to upload files). NVD description · AI analysis pending | 8.8 group max | 2% |
| — |