Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-25081
7.5
HIGHCVSS v3
Published
March 9, 2023
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element. NOTE: the vendor's position is that there have been important legitimate cross-domain configurations (e.g., an apple.com IFRAME element on the icloud.com website) and that "Auto-fill on page load" is not enabled by default.
bitwarden/bitwarden
GitHubBitwarden client applications (web, browser extension, desktop, and cli)
GitHubBitwarden client applications (web, browser extension, desktop, and cli)<= 2023.2.1NVD
bitwarden
Python Package Index
Crates.io