Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-55225
9.8
CRITICALCVSS v3
Published
January 9, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue in the component src/api/identity.rs of Vaultwarden prior to v1.32.5 allows attackers to impersonate users, including Administrators, via a crafted authorization request.
dani-garcia/vaultwarden
GitHubUnofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
GitHubUnofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs< 1.32.5NVD