CVE-2025-13762
BaseFortify
Publication date: 2025-11-27
Last updated on: 2025-11-27
Assigner: Government Technology Agency of Singapore Cyber Security Group (GovTech CSG)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cyberark | secure_web_sessions_extension | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Improper Input Validation issue in the CyberArk Secure Web Sessions Extension for Chrome and Edge browsers. It allows an attacker to cause a Denial of Service (DoS) by exploiting the way new Secure Web Sessions (SWS) are started. The issue affects versions of the extension before 2.2.30305.
How can this vulnerability impact me? :
The vulnerability can impact you by causing a Denial of Service, which means that legitimate users may be unable to start new Secure Web Sessions using the affected CyberArk browser extension. This could disrupt access to secure web sessions and potentially affect business operations relying on this functionality.