Description
An issue in the component src/api/identity.rs of Vaultwarden prior to v1.32.5 allows attackers to impersonate users, including Administrators, via a crafted authorization request.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | vaultwarden | < 1.32.5 | 1.32.5 | GHSA-x7m9-mv49-fv73 |
Advisories 1
- WID-SEC-2025-0042 Vaultwarden: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 21, 2025