Threats tagged 'ghsa-8fch-9xj9-6929'

A vulnerability exists in ByteDance Coze Scraper Extension up to version 2.0.2 in the External Message Handler component. The flaw involves improper authorization checks in the function chrome.runtime.onMessageExternal.addListener, allowing remote attackers to manipulate certain arguments and bypass authorization. Exploit code is publicly available, but no vendor response or patch has been provided. The CVSS score is 4.3, indicating a low severity risk.