Lucene search
K

CVE-2024-56335 Privilege escalation allows organization groups to be updated/deleted if their UUID is known in vaultwarden

🗓️ 20 Dec 2024 20:15:35Reported by GitHub_MType 
cvelist
 cvelist
🔗 www.cve.org👁 16 Views

Privilege escalation in Vaultwarden allows data manipulation if UUID is known; patch available.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
AlpineLinux
CVE-2024-56335
20 Dec 202421:15
alpinelinux
Circl
CVE-2024-56335
20 Dec 202420:20
circl
CNNVD
Vaultwarden 安全漏洞
20 Dec 202400:00
cnnvd
CVE
CVE-2024-56335
20 Dec 202420:15
cve
EUVD
EUVD-2024-53116
3 Oct 202520:07
euvd
Fedora
[SECURITY] Fedora 41 Update: vaultwarden-1.32.7-4.fc41
29 Jan 202505:03
fedora
Fedora
[SECURITY] Fedora 40 Update: vaultwarden-1.32.7-4.fc40
29 Jan 202505:24
fedora
Tenable Nessus
Fedora 40 : vaultwarden (2025-3dff292265)
29 Jan 202500:00
nessus
Tenable Nessus
Fedora 41 : vaultwarden (2025-4cb7637c98)
29 Jan 202500:00
nessus
NVD
CVE-2024-56335
20 Dec 202421:15
nvd
Rows per page
[
  {
    "vendor": "dani-garcia",
    "product": "vaultwarden",
    "versions": [
      {
        "version": "< 1.32.7",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation