Unrated

Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe, or ff, and the :: address) an...

CVE-2020-15879 First seen on SecPulse Jul 22, 2020

Original description The description as published by the source.

Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe, or ff, and the :: address) and certain IPv4 addresses (0.0.0.0/8, 127.0.0.0/8, and 169.254.0.0/16).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com

Key facts

Severity: Unrated
Published: Jul 22, 2020
First seen on SecPulse: Jul 22, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51