security1 distinct publisher
N-able Passportal leaked whole vaults to any page: v3.49.6 stops the leak, not the tokens
A missing origin check let any site pull an MSP's decrypted vault and keep access for up to 100 days, according to the researchers who found it. Installing the patch does not retire tokens already taken.
Publishers:amibeingpwned.com
Reality
- Evidence63
- Adoption58