Password exfiltration possible with Bitwarden vulnerability

BleepingComputer reports that password management service Bitwarden has a vulnerability within its web extension's credentials autofill functionality, which could be exploited to enable credential theft via website-embedded iframes.

autofill bitwarden bleepingcomputer credential credentials credential theft data security embedded enable exfiltration exploited extension iframes management password password management reports service theft vulnerability vulnerability management web website