57 matches found
CVE-2024-33669
An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple requests to HaveIBeenPwned while a password is being typed, which results in an information leak. This allows an attacker capable of observing Passbolt's HTTPS queries to the Pwned Password API to more easily...
PT-2024-25426 · Passbolt · Passbolt Browser Extension
Name of the Vulnerable Software and Affected Versions: Passbolt Browser Extension versions prior to 4.6.2 Description: An issue in the Passbolt Browser Extension results in an information leak. As a user types a password, multiple requests are sent to HaveIBeenPwned, allowing an attacker who can...
CVE-2024-33669
Summary : CVE-2024-33669 affects Passbolt Browser Extension prior to 4.6.2. The issue: when a user types a password, the extension sends multiple requests to HaveIBeenPwned, causing an information leak by exposing password-typing observations and enabling easier brute-forcing of manually entered ...
CVE-2024-33669
An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple requests to HaveIBeenPwned while a password is being typed, which results in an information leak. This allows an attacker capable of observing Passbolt's HTTPS queries to the Pwned Password API to more easily...
Solving Your Teams Secure Collaboration Challenges
In today's interconnected world, where organisations regularly exchange sensitive information with customers, partners and employees, secure collaboration has become increasingly vital. However, collaboration can pose a security risk if not managed properly. To ensure that collaboration remains...
GHSA-J2FP-9WP5-MG66 Passbolt API is vulnerable to XSS in the url field on the password workspace grid and sidebar
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...
Passbolt API is vulnerable to XSS in the url field on the password workspace grid and sidebar
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...
Remote code execution
More info at https://www.passbolt.com/incidents/20190211multiplevulnerabilities...
E-mail HTML injection
More info at https://www.passbolt.com/incidents/20190211multiplevulnerabilities...
Remote code execution
More info at https://www.passbolt.com/incidents/20190211multiplevulnerabilities...
Passbolt Cross-Site Scripting Vulnerability
Passbolt API is an open source team password manager. A cross-site scripting vulnerability exists in the url field of the password workspace in Passbolt API versions 1.6.4 and earlier. A remote attacker could exploit this vulnerability to execute code, alter or delete resources...
CVE-2017-1000442
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...
Default credentials
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...
CVE-2017-1000442
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...
CVE-2017-1000442
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...
CVE-2017-1000442
CVE-2017-1000442 affects Passbolt API (version 1.6.4 and earlier) and is due to a cross-site scripting (XSS) vulnerability in the url field within the password workspace. The issue allows XSS via the URL input in the affected component; under CVSS3, the base score is 5.4 (MEDIUM) with network as ...