Description
An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or R25 users who are running automations that work with Google Chrome or Microsoft Edge. A bad actor could create a website that includes malicious code. The vulnerability could occur if a Robot Runtime user navigates to the malicious website.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pegasystems | Pega Robot Studio | 22.1, R25 | — |