Skip to content
OpenAdvisories

Package · RubyGems

pwpush

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.7
    CVE-2024-56733

    Password Pusher Allows Session Token Interception Leading to Potential Hijacking

    Password Pusher is an open source application to communicate sensitive information over the web. A vulnerability has been reported in versions 1.50.3 and prior where an attacker can copy the session cookie before a user logs out, potentially allowing session …

    pglombardo PasswordPusher pwpush RubyGems
  • Medium 5.3
    CVE-2024-52796

    Password Pusher's rate limiter can be bypassed by forging proxy headers

    Password Pusher, an open source application to communicate sensitive information over the web, comes with a configurable rate limiter. In versions prior to v1.49.0, the rate limiter could be bypassed by forging proxy headers allowing bad actors to send unlimi…

    pglombardo PasswordPusher pwpush RubyGems