Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2020/07/16 4:40 p.m.28 views

Bitwarden: Blind HTTP GET SSRF via website icon fetch (bypass of pull#812)

After a credential has been added to vault.bitwarden.com or any self-hosted installation, if the settings allow website icons to be fetched https://bitwarden.com/help/article/website-icons/, the Bitwarden server will try to fetch the icon image. The relevant source code is...

0.1AI score
SaveExploits0
Rows per page
Query Builder