Enpass tricked into auto-filling credentials into untrusted pages

[DTO]

Enpass 6.8.4 (1166) is vulnerable to this:

https://github.com/google/security-research/security/advisories/GHSA-mhhf-w9xw-pp9x

[Abhishek Dewan]

Hi @DTO

Welcome to the Enpass Forums.

We appreciate you sharing this information with us. We will soon release a fix for this issue for future Enpass versions. Your patience in the meantime is appreciated.

#SI-3225

 

[Alfonso Zubizarreta]

Was this fixed?  Thank you

[Tarun Singh Rawat]

The issue has already been resolved. Please update both your Enpass app and Enpass browser extension to the latest version.