CVE-2022-4610

A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected by this issue is some unknown functionality. The manipulation leads to risky cryptographic algorithm. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216272.

• CWE-310
• CWE-327

• https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.htmlExploit, Third Party Advisory
• https://vuldb.com/?id.216272Third Party Advisory
• https://www.modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Report-v1.0.pdfExploit, Third Party Advisory
• https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.htmlExploit, Third Party Advisory
• https://vuldb.com/?id.216272Third Party Advisory
• https://www.modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Report-v1.0.pdfExploit, Third Party Advisory

Published

Dec 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-46089Cross Site Scripting (XSS) vulnerability in the add-airline …6.1
• CVE-2022-4609Cross-site Scripting (XSS) - Stored in GitHub repository use…5.4
• CVE-2022-46091Cross Site Scripting (XSS) vulnerability in the feedback for…4.7
• CVE-2022-46093Hospital Management System v1.0 is vulnerable to SQL Injecti…8.2
• CVE-2022-46095Sourcecodester Covid-19 Directory on Vaccination System 1.0 …6.1
• CVE-2022-46096A Cross site scripting (XSS) vulnerability in Sourcecodester…6.1
• CVE-2022-46101AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.i…8.8
• CVE-2022-46102AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya…9.8
• CVE-2022-46109Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via…7.5
• CVE-2022-4611A vulnerability, which was classified as problematic, was fo…5.3
• CVE-2022-46117Helmet Store Showroom Site v1.0 is vulnerable to SQL Injecti…7.2
• CVE-2022-46118Helmet Store Showroom Site v1.0 is vulnerable to SQL Injecti…7.2