Low WID-SEC-2025-1137 1 CVE

Bitwarden: Schwachstelle ermöglicht Cross-Site Scripting

Published May 25, 2025 · Updated May 25, 2025 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Bitwarden ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Bitwarden ist eine Open-Source-Lösung für die Passwortverwaltung.

Vulnerabilities 1

Low 3.5

CVE-2025-5138

Bitwarden PDF File cross site scripting

A vulnerability was found in Bitwarden up to 2.25.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component PDF File Handler. The manipulation leads to cross site scripting. The attack can be launched …

May 25, 2025

Revision history

2025-05-25 #1
Initiale Fassung

References

GitHub Advisory Database vom 2025-05-25
https://github.com/advisories/GHSA-36qw-697c-h8mq
Bitwarden Release Liste
https://github.com/bitwarden/web/releases