HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
17 Jun 2025, 20:56
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Enpass password Manager
Enpass Linux Microsoft Linux linux Kernel Microsoft windows |
|
| References | () https://packetstormsecurity.com/files/177075/Enpass-Desktop-Application-6.9.2-HTML-Injection.html - Broken Link | |
| CPE | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:enpass:password_manager:6.9.2:*:*:*:desktop:*:*:* |
21 Nov 2024, 09:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://packetstormsecurity.com/files/177075/Enpass-Desktop-Application-6.9.2-HTML-Injection.html - |
03 Jul 2024, 01:49
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | CWE-94 |
11 Apr 2024, 12:47
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
10 Apr 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-10 21:15
Updated : 2025-06-17 20:56
NVD link : CVE-2024-26362
Mitre link : CVE-2024-26362
CVE.ORG link : CVE-2024-26362
JSON object : View
Products Affected
enpass
- password_manager
microsoft
- windows
linux
- linux_kernel
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')