Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Vaultwarden 安全漏洞
Vulnerability Description
Vaultwarden是Daniel García个人开发者的一个用 Rust 编写的 Bitwarden 服务器 API 的替代实现。 Vaultwarden v1.32.5之前版本存在安全漏洞。攻击者利用该漏洞可以通过向电子邮件消息的username字段注入特制的有效载荷来执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A