Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-55226 EUVD-2025-0047GHSA-vprm-27pv-jp3w

Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by mitre

Package: vaultwarden Ecosystem: crates.io

Description

Vaultwarden v1.32.5 was discovered to contain an authenticated reflected cross-site scripting (XSS) vulnerability via the component /api/core/mod.rs.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io vaultwarden < 1.32.5 1.32.5 GHSA-vprm-27pv-jp3w

Advisories 1

References