Skip to content
OpenAdvisories
Medium WID-SEC-2024-2147 3 CVEs

Vaultwarden: Mehrere Schwachstellen ermöglichen

Published Sep 15, 2024 · Updated Sep 15, 2024 · de-DE

Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vaultwarden ausnutzen, um Informationen offenzulegen, erhöhte Rechte zu erlangen und einen Cross-Site-Scripting-Angriff zu starten.

Product

Vaultwarden ist eine alternative Implementierung der Server API des Bitwarden Passwort-Managers.

Vulnerabilities 3

  • High 8.8
    CVE-2024-39924 Public exploit EPSS 13%

    An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A vulnerability has been identified in the authe…

    vaultwarden Alpine
  • Medium 6.5
    CVE-2024-39925

    An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. It lacks an offboarding process for members who …

    vaultwarden Alpine
  • Medium 5.4
    CVE-2024-39926

    An issue was discovered in Vaultwarden (formerly Bitwarden_RS) 1.30.3. A stored cross-site scripting (XSS) or, due to t…

    vaultwarden Alpine

Revision history

  1. #1

    Initiale Fassung

References