TI-2024-22253 CVE-2024-33669 · GHSA-xfq4-78j7-v594
An issue was discovered in Passbolt Browser Extension before 4.6.2.
Priority MEDIUM 63
An issue was discovered in Passbolt Browser Extension before 4.6.2.
Passbolt
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Passbolt records in CISA KEVNo Passbolt vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2017-14656 CVE-2017-1000442 · GHSA-j2fp-9wp5-mg66
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace
Priority LOW 25
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace
TI-2024-22254 CVE-2024-33670 · GHSA-2pg6-vw9c-qhjv
Passbolt API before 4.6.2 allows HTML injection in a URL parameter, resulting in custom…
Priority LOW 21
Passbolt API before 4.6.2 allows HTML injection in a URL parameter, resulting in custom content being displayed when a user visits the crafted URL.
TI-2025-20637 CVE-2025-27913 · GHSA-28wr-h897-6hmv
Passbolt API before 5, if the server is misconfigured (with an incorrect installation…
Priority LOW 16
Passbolt API before 5, if the server is misconfigured (with an incorrect installation process and disregarding of Health Check results), can send email messages with a domain name taken from an attacker-controlled HTTP H…