2 lines
2.3 KiB
JSON
2 lines
2.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Secure Exam Proctor Extension","vendor":"Proctorio","versions":[{"status":"affected","version":"1.5.25220.33"},{"status":"unaffected","version":"1.5.25220.36"}]}],"source":"7004884b-51e2-48e8-b4a2-5ca29e80453e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Proctorio Chrome Extension is a browser extension used for online proctoring. The extension contains multiple window.addEventListener('message', ...) handlers that do not properly validate the origin of incoming messages. Specifically, an internal messaging bridge processes messages based solely on the presence of a fromWebsite property without verifying the event.origin attribute."},{"lang":"es","value":"La extensión de Chrome de Proctorio es una extensión de navegador utilizada para la supervisión en línea. La extensión contiene múltiples manejadores window.addEventListener('message', ...) que no validan correctamente el origen de los mensajes entrantes. Específicamente, un puente de mensajería interno procesa los mensajes basándose únicamente en la presencia de una propiedad fromWebsite sin verificar el atributo event.origin."}],"id":"CVE-2026-2345","lastModified":"2026-06-17T10:30:49.080","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":3.6,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":1.0,"impactScore":2.5,"source":"7004884b-51e2-48e8-b4a2-5ca29e80453e","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-2345","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-02-11T21:19:02.758590Z","version":"2.0.3"}}]},"published":"2026-02-11T15:16:18.160","references":[{"source":"7004884b-51e2-48e8-b4a2-5ca29e80453e","url":"https://www.hckrt.com/hacktivity/46b61f36-b685-4667-aebf-82a67ad69ad6"}],"sourceIdentifier":"7004884b-51e2-48e8-b4a2-5ca29e80453e","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-346"}],"source":"7004884b-51e2-48e8-b4a2-5ca29e80453e","type":"Secondary"}]}
|