| Package | Affected versions | Patched versions |
|---|---|---|
| passwordstate | = 9.4 |
In Click Studios (SA) Pty Ltd Passwordstate 9435, users with access to a passwordlist can gain access to additional password lists without permissions. Specifically, an authenticated user who has write permissions to a password list in one folder (with the default permission model) can extend his permissions to all other password lists in the same folder.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free