Description
Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed information consists of SHA-1 hashes that are inadequately obfuscated using a simple Caesar cipher, which can be easily reversed to recover the original hash values and access the protected data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Securly | Securly Chrome Extension | ≤ 3.0.7 | — |