CyberRota Analysis
AI-GeneratedThe 2FA Authenticator Extension for Chrome is vulnerable due to a weakness in the Background Service Worker, specifically in the chrome.runtime.onMessageExternal.addListener function. This flaw allows an attacker with local access to manipulate the sender.id argument, potentially leading to information disclosure. Users of this extension, particularly those managing sensitive data, should prioritize applying any available updates to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in extension.vn 2FA Authenticator Extension 1.0.0.2 on Chrome. The impacted element is the function chrome.runtime.onMessageExternal.addListener of the component Background Service Worker. Executing a manipulation of the argument sender.id can lead to information disclosure. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.