CVE-2024-33669

An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple requests to HaveIBeenPwned while a password is being typed, which results in an information leak. This allows an attacker capable of observing Passbolt's HTTPS queries to the Pwned Password API to more easily brute force passwords that are manually typed by the user.

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://blog.quarkslab.com/passbolt-a-bold-use-of-haveibeenpwned.html	Third Party Advisory Exploit
https://haveibeenpwned.com	Product
https://help.passbolt.com/incidents/pwned-password-service-information-leak	Issue Tracking Vendor Advisory
https://www.passbolt.com	Product
https://www.passbolt.com/security/more	Product
https://blog.quarkslab.com/passbolt-a-bold-use-of-haveibeenpwned.html	Third Party Advisory Exploit
https://haveibeenpwned.com	Product
https://help.passbolt.com/incidents/pwned-password-service-information-leak	Issue Tracking Vendor Advisory
https://www.passbolt.com	Product
https://www.passbolt.com/security/more	Product

Configurations

Configuration 1 (hide)

cpe:2.3:a:passbolt:passbolt_browser_extension:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-04-26 01:15

Updated : 2025-06-18 19:26

NVD link : CVE-2024-33669

Mitre link : CVE-2024-33669

CVE.ORG link : CVE-2024-33669

JSON object : View

Products Affected

passbolt

passbolt_browser_extension

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2024-33669", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 2.2}]}, "published": "2024-04-26T01:15:46.383", "references": [{"url": "https://blog.quarkslab.com/passbolt-a-bold-use-of-haveibeenpwned.html", "tags": ["Third Party Advisory", "Exploit"], "source": "[email protected]"}, {"url": "https://haveibeenpwned.com", "tags": ["Product"], "source": "[email protected]"}, {"url": "https://help.passbolt.com/incidents/pwned-password-service-information-leak", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "[email protected]"}, {"url": "https://www.passbolt.com", "tags": ["Product"], "source": "[email protected]"}, {"url": "https://www.passbolt.com/security/more", "tags": ["Product"], "source": "[email protected]"}, {"url": "https://blog.quarkslab.com/passbolt-a-bold-use-of-haveibeenpwned.html", "tags": ["Third Party Advisory", "Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://haveibeenpwned.com", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://help.passbolt.com/incidents/pwned-password-service-information-leak", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.passbolt.com", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.passbolt.com/security/more", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple requests to HaveIBeenPwned while a password is being typed, which results in an information leak. This allows an attacker capable of observing Passbolt's HTTPS queries to the Pwned Password API to more easily brute force passwords that are manually typed by the user."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Passbolt Browser Extension antes de 4.6.2. Puede enviar m\u00faltiples solicitudes a HaveIBeenPwned mientras se escribe una contrase\u00f1a, lo que resulta en una fuga de informaci\u00f3n. Esto permite a un atacante capaz de observar las consultas HTTPS de Passbolt a la API de Pwned Password forzar m\u00e1s f\u00e1cilmente las contrase\u00f1as que el usuario escribe manualmente."}], "lastModified": "2025-06-18T19:26:21.547", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:passbolt:passbolt_browser_extension:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1598022-2365-4592-B906-B48077DFDB17", "versionEndExcluding": "4.6.2"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}