Date: Sat, 25 Jan 2025 14:23:12 GMT From: Bernard Spil <brnrd@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 88f39d025c1c - main - security/vaultwarden: Register <= 1.32.7 vulns Message-ID: <202501251423.50PENCth090009@gitrepo.freebsd.org>
index | next in thread | raw e-mail
The branch main has been updated by brnrd: URL: https://cgit.FreeBSD.org/ports/commit/?id=88f39d025c1cf74638326605ac6b876f07ceb9c1 commit 88f39d025c1cf74638326605ac6b876f07ceb9c1 Author: Bernard Spil <brnrd@FreeBSD.org> AuthorDate: 2025-01-25 14:23:09 +0000 Commit: Bernard Spil <brnrd@FreeBSD.org> CommitDate: 2025-01-25 14:23:09 +0000 security/vaultwarden: Register <= 1.32.7 vulns --- security/vuxml/vuln/2025.xml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index cc3105d6abe1..f21059cf40cf 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,30 @@ + <vuln vid="41711c0d-db27-11ef-873e-8447094a420f"> + <topic>Vaultwarden -- Muiltiple vulnerabilities</topic> + <affects> + <package> + <name>vaultwarden</name> + <range><lt>1.33.0</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>The Vaultwarden project reports:</p> + <blockquote cite="https://github.com/dani-garcia/vaultwarden/releases/tag/1.33.0">; + <p>RCE in the admin panel.</p> + <p>Getting access to the Admin Panel via CSRF.</p> + <p>Escalation of privilege via variable confusion in OrgHeaders trait.</p> + </blockquote> + </body> + </description> + <references> + <url>https://github.com/dani-garcia/vaultwarden/releases/tag/1.33.0</url>; + </references> + <dates> + <discovery>2025-01-25</discovery> + <entry>2025-01-25</entry> + </dates> + </vuln> + <vuln vid="c53cd328-8131-4fc2-a083-a9e9d45e3028"> <topic>chromium -- multiple security fixes</topic> <affects>home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202501251423.50PENCth090009>