CVE-2022-25570

CVE-2022-25570 describes an authenticated privilege escalation vulnerability in Click Studios Passwordstate 9435. An attacker with write permissions to a password list within a folder can gain unauthorized access to all other password lists in that same folder. This medium-severity vulnerability (CVSS 6.5) has a low attack complexity and could lead to high confidentiality impact, as an attacker could view sensitive credentials. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.