What is GHSA-mmjg-x39c-438q?

GHSA-mmjg-x39c-438q is a security advisory published by GitHub Security Advisories with High severity. Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1...

Which CVE IDs does GHSA-mmjg-x39c-438q cover?

GHSA-mmjg-x39c-438q covers the following CVE IDs: CVE-2026-45173. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mmjg-x39c-438q?

GHSA-mmjg-x39c-438q has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-mmjg-x39c-438qHighCVSS 6.5

Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1...

Vendor

GitHub Security Advisories

Published

June 12, 2026

Last Modified

June 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-45173 →

📋 Description

Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validation flaw within its internal web-page verification routines. If an authenticated user navigates to a specially crafted webpage, this interaction could potentially allow a remote attacker to trigger unauthorized application interaction or execution parameters within the context of that authenticated browser session. CyberArk Security Bulletin: CA26-21

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-45173
https://docs.cyberark.com/find-identity-administration-docs/latest/en/content/getstarted/identity-new-doc-location.htm
https://github.com/advisories/GHSA-mmjg-x39c-438q