CVE-2024-55224

概要

参考情報

• dani-garcia/vaultwarden release 1.32.4 · Release Notes
• dani-garcia/vaultwarden release 1.32.5 · Release Notes
• insinuator.net/2024/11/vulnerability-disclosure-authentication-bypass-in-vaultwarden-versions-1-32-5 · Exploit

vaultwarden のその他の脆弱性

• CVE-2026-43914緊急 9.8Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.4, there is a security vulnerability in Vaultwarden that allows …
• CVE-2026-43913高 8.1Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, Vaultwarden allows an unconfirmed organization owner to purge…
• CVE-2026-43912高 8.7Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, Vaultwarden does not enforce that a groups_users.users_organi…
• CVE-2026-43911高 8.1Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, refresh tokens are not invalidated when the user's security_s…
• CVE-2026-33420中 5.3Vaultwarden is a Bitwarden-compatible server written in Rust. In version 1.35.4 and earlier, the get_org_collections_details endpoint (GET /…