Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-55224
9.6
CRITICALCVSS v3
Published
January 9, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message.
dani-garcia/vaultwarden
GitHubUnofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
GitHubUnofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs< 1.32.5NVD