CVE-2026-45243
- Source
- https://cve.org/CVERecord?id=CVE-2026-45243
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45243.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-45243
- Aliases
- Published
- 2026-05-18T18:50:45.838Z
- Modified
- 2026-07-16T03:31:04.292823606Z
- Severity
-
- 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N CVSS Calculator
- Summary
- Summarize < 0.15.1 Browser Extension Missing Authorization via Content Script
- Details
-
Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge that allows malicious pages to perform unauthorized operations on automation artifacts. Attackers can simulate runtime messages with spoofed sender identifiers to list, read, create, overwrite, or delete automation artifacts scoped to the affected tab without proper authorization checks.
- Database specific
{ "cwe_ids": [ "CWE-862" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45243.json", "cna_assigner": "VulnCheck" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45243.json
- https://github.com/steipete/summarize/releases/tag/v0.15.2
- https://nvd.nist.gov/vuln/detail/CVE-2026-45243
- https://www.vulncheck.com/advisories/summarize-browser-extension-missing-authorization-via-content-script
- https://github.com/steipete/summarize/pull/222
- https://github.com/steipete/summarize/commit/357544063af535bd574752622f9eb94be33ee5fd
- https://github.com/steipete/summarize
Affected packages
Git / github.com/steipete/summarize
Affected ranges
- Type
- GIT
- Repo
- https://github.com/steipete/summarize
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixedFixed
- Database specific
{ "cpe": "cpe:2.3:a:steipete:summarize:*:*:*:*:*:*:*:*", "source": [ "CPE_RANGE", "REFERENCES" ], "extracted_events": [ { "introduced": "0" }, { "fixed": "0.15.1" } ] }