vaultwarden vulnerabilities (crates.io)
7 vulnerabilities.
-
vaultwardencrates.io Vaultwarden: Unauthorized Access via Partial Update API on Another User’s Cipher 5.4 Medium -
vaultwardencrates.io Vaultwarden: Collection Management Operations Allowed Without `manage` Verification for Manager Role 8.3 High -
vaultwardencrates.io Vaultwarden: Privilege Escalation via Bulk Permission Update to Unauthorized Collections by Manager 8.3 High -
vaultwardencrates.io Vaultwarden: 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement 6.0 Medium -
vaultwardencrates.io Vaultwarden authenticated reflected cross-site scripting (XSS) vulnerability 5.4 Medium -
vaultwardencrates.io Vaultwarden vulnerable to user impersonation 9.8 Critical -
vaultwardencrates.io Vaultwarden HTML injection vulnerability 9.6 Critical