CVE-2022-4613

A vulnerability was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as critical. This issue affects some unknown processing of the component Browser Extension Provisioning. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216275.

• CWE-266

• https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.htmlExploit, Third Party Advisory
• https://vuldb.com/?id.216275Third Party Advisory
• https://www.modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Report-v1.0.pdfExploit, Third Party Advisory
• https://modzero.com/modlog/archives/2022/12/19/better_make_sure_your_password_manager_is_secure/index.htmlExploit, Third Party Advisory
• https://vuldb.com/?id.216275Third Party Advisory
• https://www.modzero.com/static/MZ-22-03_Passwordstate_Security_Disclosure_Report-v1.0.pdfExploit, Third Party Advisory

Published

Dec 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-46123Helmet Store Showroom Site v1.0 is vulnerable to SQL Injecti…7.2
• CVE-2022-46124Helmet Store Showroom Site v1.0 is vulnerable to SQL Injecti…7.2
• CVE-2022-46125Helmet Store Showroom Site v1.0 is vulnerable to SQL Injecti…7.2
• CVE-2022-46126Helmet Store Showroom Site v1.0 is vulnerable to SQL Injecti…7.2
• CVE-2022-46127Helmet Store Showroom Site v1.0 is vulnerable to SQL Injecti…7.2
• CVE-2022-46128phpgurukul Doctor Appointment Management System V 1.0.0 is v…6.1
• CVE-2022-46135In AeroCms v0.0.1, there is an arbitrary file upload vulnera…7.2
• CVE-2022-46137AeroCMS v0.0.1 is vulnerable to Directory Traversal. The imp…7.5
• CVE-2022-46139TP-Link TL-WR940N V4 3.16.9 and earlier allows authenticated…6.5
• CVE-2022-4614Cross-site Scripting (XSS) - Stored in GitHub repository ala…5.4
• CVE-2022-46140Affected devices use a weak encryption scheme to encrypt the…7.1
• CVE-2022-46141A vulnerability has been identified in SIMATIC STEP 7 (TIA P…5.5