CVE-2025-13762

Client-Side Denial of Service Condition in SWS Extension prior to version 2.2.30305

CVSS 4.8 MEDIUMEPSS 0.1%CWE-20

Improper Input Validation vulnerability in CyberArk CyberArk Secure Web Sessions Extension on Chrome, Edge allows Denial of Service when trying to starting new SWS sessions.This issue affects CyberArk Secure Web Sessions Extension: before 2.2.30305.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:A/AU:Y

Produtos afetados

CyberArk · CyberArk Secure Web Sessions Extension

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://chromewebstore.google.com/detail/cyberark-secure-web-sessi/ohfinlfcbaehgokpmkjcmkgdcbgamgln?hl=en https://microsoftedge.microsoft.com/addons/detail/cyberark-secure-web-sessi/gmfjibhpaliafbemoifjjdkmgaknhohb?hl=en-US