Is IBM Cognos TM1 Web Clipboard Extension safe?
IBM Cognos TM1 Web Clipboard Extension lets any website read and overwrite your clipboard with no origin check.
This extension listens for two custom events on every http/https page it runs on and relays them to a background script that has clipboard access. Any webpage's own script can dispatch these events to read the current OS clipboard contents or silently replace them with attacker-chosen text, since the extension never checks which site sent the request.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.0.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read whatever you have copied to your clipboard
clipboardRead
Write to your clipboard
clipboardWrite