Skip to content
Threat Feed
Subscribe

Vendor

Vaultwarden

3 briefs RSS
high advisory

Vaultwarden Access Control Bypass via Membership Validation Failure

Vaultwarden versions 1.37.3 and earlier fail to validate organization membership status, allowing revoked or pending members to retain unauthorized access to sensitive cipher data.

Vaultwarden privilege-escalation access-control authentication
1t 1c
high advisory

Vaultwarden Vulnerabilities Allow Privilege Escalation and Information Disclosure

Multiple vulnerabilities in Vaultwarden allow a remote, anonymous attacker to gain user privileges and disclose sensitive information.

Vaultwarden vulnerability privilege-escalation information-disclosure
2r 3t
high advisory

Multiple Vulnerabilities in Vaultwarden

Multiple vulnerabilities in Vaultwarden could be exploited by an attacker to bypass security measures, conduct a denial-of-service attack, and disclose information, potentially leading to unauthorized access and service disruption.

Vaultwarden vulnerability denial-of-service information-disclosure security-bypass
2r 3t