CVE-2024-55226

Name of the Vulnerable Software and Affected Versions Vaultwarden version 1.32.5

Description The issue is related to an authenticated reflected Cross-Site Scripting (XSS) vulnerability. This vulnerability is present in the /api/core/mod.rs component.

Recommendations For Vaultwarden version 1.32.5, consider restricting access to the /api/core/mod.rs component until a patch is available. As a temporary workaround, avoid using the vulnerable component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.