Lucene search

K

5 matches found

CVE
CVE
added 2025/01/09 9:15 p.m.172 views

CVE-2024-55225

An issue in the component src/api/identity.rs of Vaultwarden prior to v1.32.5 allows attackers to impersonate users, including Administrators, via a crafted authorization request.

9.8CVSS6.9AI score0.00123EPSS
CVE
CVE
added 2025/01/27 6:15 p.m.64 views

CVE-2025-24365

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker can obtain owner rights of other organization. Hacker should know the ID of victim organization (in real case the user can be a part of the organization as an unprivileged user) and be...

8.1CVSS6.7AI score0.00054EPSS
CVE
CVE
added 2025/01/27 6:15 p.m.61 views

CVE-2025-24364

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker with authenticated access to the vaultwarden admin panel can execute arbitrary code in the system. The attacker could then change some settings to use sendmail as mail agent but adjust...

7.2CVSS7.6AI score0.0016EPSS
CVE
CVE
added 2024/12/20 9:15 p.m.54 views

CVE-2024-56335

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. In affected versions an attacker is capable of updating or deleting groups from an organization given a few conditions: 1. The attacker has a user account in the server. 2. The attacker's accou...

7.6CVSS7.7AI score0.00141EPSS
CVE
CVE
added 2025/01/09 9:15 p.m.43 views

CVE-2024-55224

An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message.

9.6CVSS8AI score0.00185EPSS