Описание
Vaultwarden v1.32.5 was discovered to contain an authenticated reflected cross-site scripting (XSS) vulnerability via the component /api/core/mod.rs.
Ссылки
- Release Notes
- Release Notes
- ExploitPatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:dani-garcia:vaultwarden:1.32.5:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.00144
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 5.4
debian
около 1 года назад
Vaultwarden v1.32.5 was discovered to contain an authenticated reflect ...
github
около 1 года назад
Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability
EPSS
Процентиль: 35%
0.00144
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79