Description (CNA)
Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed information consists of SHA-1 hashes that are inadequately obfuscated using a simple Caesar cipher, which can be easily reversed to recover the original hash values and access the protected data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Securly / Securly Chrome Extension | affected 0 through 3.0.7 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.