Tubebuddy For Youtube Extension
Monthly
TubeBuddy for YouTube Chrome extension versions up to 5.8.4 by BEN Group exposes users to authentication token overwrite via an insufficiently verified redirect URL handler. The `TBGlobal.GetToken` function in `tubebuddymaster1.js` fails to validate the authenticity of data supplied through the `t`, `c`, and `r` URL parameters (CWE-345), enabling a remote attacker to overwrite the victim's stored authentication token. A public proof-of-concept exploit exists; no KEV listing has been confirmed.
TubeBuddy for YouTube Chrome extension versions up to 5.8.4 by BEN Group exposes users to authentication token overwrite via an insufficiently verified redirect URL handler. The `TBGlobal.GetToken` function in `tubebuddymaster1.js` fails to validate the authenticity of data supplied through the `t`, `c`, and `r` URL parameters (CWE-345), enabling a remote attacker to overwrite the victim's stored authentication token. A public proof-of-concept exploit exists; no KEV listing has been confirmed.