As of today, the issue has reappeared in Firefox. macOS 27.0.1 Firefox 157.0.1 Extension 6.11.18.2 I un- and reinstalled the extension, the problem persists. Error 403 code : 1 origin : moz-extension://ddd0aae5-4357-4802-9013-ccefb829ac4f path port : 54943 server_port : 10391
Czech Republic based security researcher Marek Tóth, unveiled a series of unpatched zero-day clickjacking security vulnerabilities impacting the browser-based plugins for a wide range of password managers:
https://marektoth.com/blog/dom-based-extension-clickjacking/
Is this now fixed in all Enpass Browser Extensions?
This is only mentioned in the release notes for the Chrome Extension (6.11.6):
„Fixed a clickjacking vulnerability in the extension by preventing popover windows from overlaying the inline menu (Reported by Marek Tóth)“