Filtered by vendor Dani-garcia
Subscriptions
Filtered by product Vaultwarden
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2024-55224 | 1 Dani-garcia | 1 Vaultwarden | 2025-06-20 | 9.6 Critical |
An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message. | ||||
CVE-2024-55225 | 1 Dani-garcia | 1 Vaultwarden | 2025-06-20 | 9.8 Critical |
An issue in the component src/api/identity.rs of Vaultwarden prior to v1.32.5 allows attackers to impersonate users, including Administrators, via a crafted authorization request. |
Page 1 of 1.