Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5c89-ppg6-hr22

Опубликовано: 23 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9

Описание

An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robot Studio developers who are automating Google Chrome and Microsoft Edge using either version 22.1 or R25. This vulnerability does not affect Robot Runtime users. A bad actor could create a website that includes malicious code. The vulnerability may be exploited if a Pega Robot Studio developer is deceived into visiting this website during interrogation mode in Robot Studio.

An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robot Studio developers who are automating Google Chrome and Microsoft Edge using either version 22.1 or R25. This vulnerability does not affect Robot Runtime users. A bad actor could create a website that includes malicious code. The vulnerability may be exploited if a Pega Robot Studio developer is deceived into visiting this website during interrogation mode in Robot Studio.

EPSS

Процентиль: 17%
0.00054
Низкий

9 Critical

CVSS4

Дефекты

CWE-284

Связанные уязвимости

nvd
26 дней назад

An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robot Studio developers who are automating Google Chrome and Microsoft Edge using either version 22.1 or R25. This vulnerability does not affect Robot Runtime users. A bad actor could create a website that includes malicious code. The vulnerability may be exploited if a Pega Robot Studio developer is deceived into visiting this website during interrogation mode in Robot Studio.

EPSS

Процентиль: 17%
0.00054
Низкий

9 Critical

CVSS4

Дефекты

CWE-284