CVE-2025-13762: CVE-2025-13762: hatalı girdi doğrulama

Açıklama (NVD)

Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial of Service when trying to starting new SWS sessions.This issue affects CyberArk Secure Web Sessions Extension: before 2.2.30305.

Özet bilgiler

CVSS v4.0

4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X

EPSS

%0,15 (yüzdelik 5)

CWE

CWE-20

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• chromewebstore.google.com
• microsoftedge.microsoft.com
• CWE-20