2Fa Authenticator Extension
Monthly
Information disclosure in extension.vn 2FA Authenticator Extension 1.0.0.2 for Chrome exposes stored TOTP secrets via an unvalidated external message listener. The Background Service Worker's `chrome.runtime.onMessageExternal.addListener` handler fails to verify the `sender.id` field, meaning any other locally-installed Chrome extension can send a crafted message and receive TOTP seeds in response. A public proof-of-concept exploit exists; exploitation is constrained to local access with low-privilege conditions per the CVSS 4.0 vector (AV:L/PR:L), and no active exploitation has been confirmed.
Information disclosure in extension.vn 2FA Authenticator Extension 1.0.0.2 for Chrome exposes stored TOTP secrets via an unvalidated external message listener. The Background Service Worker's `chrome.runtime.onMessageExternal.addListener` handler fails to verify the `sender.id` field, meaning any other locally-installed Chrome extension can send a crafted message and receive TOTP seeds in response. A public proof-of-concept exploit exists; exploitation is constrained to local access with low-privilege conditions per the CVSS 4.0 vector (AV:L/PR:L), and no active exploitation has been confirmed.