Grammarly Patches Chrome Extension Bug That Exposed Users’ Docs

Minimalist · Feb 5, 2018

Grammarly has fixed a bug with its Chrome browser extension that exposed its authorization tokens to websites, allowing sites to assume the identity of a user and view their account’s documents.

“I’m calling this a high severity bug, because it seems like a pretty severe violation of user expectations,” said Tavis Ormandy, a researcher at Google’s Project Zero, in a Feb. 2 forum post. “Users would not expect that visiting a website gives it permission to access documents or data they’ve typed into other websites.”
Click to expand...

https://threatpost.com/grammarly-patches-chrome-extension-bug-that-exposed-users-docs

The Red Moon · Feb 6, 2018

https://bugs.chromium.org/p/project-zero/issues/detail?id=1527&desc=2

Log in or Sign up

Grammarly Patches Chrome Extension Bug That Exposed Users’ Docs

Minimalist Registered Member

The Red Moon Registered Member

Log in or Sign up

Grammarly Patches Chrome Extension Bug That Exposed Users’ Docs

Minimalist Registered Member

The Red Moon Registered Member

Useful Searches