CVE-2017-20199CWE-266CWE-284

Buttercup buttercup-browser-extension Vault access control

Low · published August 15, 2025

CVSS v4.0
2.3
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

A vulnerability was found in Buttercup buttercup-browser-extension up to 0.14.2. Affected by this vulnerability is an unknown functionality of the component Vault Handler. The manipulation results in improper access controls. The attack may be performed from a remote location. A high complexity level is associated with this attack. The exploitation appears to be difficult. The exploit has been made public and could be used. Upgrading to version 1.0.1 addresses this issue. The patch is identified as 89. Upgrading the affected component is recommended. This vulnerability only affects products that are no longer supported by the maintainer.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00481 · 40.2th percentile
Weaknesses
CWE-266 · Incorrect Privilege Assignment; CWE-284 · Improper Access Control
Published
2025-08-15T23:32Z
EPSS history
Timeline
  • 15 AUG 23:32Z
    Buttercup buttercup-browser-extension Vault access control
    cvelistv5