PT-2026-83936 · Ben · Tubebuddy For Youtube Extension
CVSS v2.0
6.4
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
BEN Group TubeBuddy for YouTube Extension versions prior to 5.8.5
Description
Insufficient verification of data authenticity occurs within the
TBGlobal.GetToken() function located in the tubebuddymaster1.js file. A remote attacker can exploit this by manipulating the t/c/r argument.Recommendations
Update BEN Group TubeBuddy for YouTube Extension to version 5.8.5 or later.
As a temporary mitigation, restrict the use of the
TBGlobal.GetToken() function until the update is applied.Exploit
Fix
Insufficient Verification of Data Authenticity
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tubebuddy For Youtube Extension