PrivateBin

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

PrivateBin records in CISA KEV

No PrivateBin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Privatebin 3 records HIGH

Records

8 records

TI-2022-08646 CVE-2022-24833 · GHSA-cqcc-mm6x-vmvw

Persistent Cross-site Scripting (XSS) vulnerability in PrivateBin

HIGH 69

PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01358 Published 2022-04-11 Fixed in v1.4.0, 1.4.0 CWE-79

TI-2025-38979 CVE-2025-62796 · GHSA-867c-p784-5q6g

PrivateBin persistent HTML injection in attachment filename enables redirect and defacement

HIGH 65

PrivateBin is an online pastebin where the server has zero knowledge of pasted data.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00295 Published 2025-10-28 Fixed in 2.0.2 CWE-79

TI-2025-40057 CVE-2025-64711 · GHSA-r9x7-7ggj-fx9f

PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users

MEDIUM 58

PrivateBin is an online pastebin where the server has zero knowledge of pasted data.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00129 Published 2025-11-13 Fixed in 2.0.3 CWE-79

TI-2026-40342 CVE-2026-55891 · GHSA-xrjc-c68j-hp7w

PrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URI

LOW 36

PrivateBin is an online pastebin where the server has zero knowledge of pasted data.

CVSS 3.1N/A 0.0 Network No auth No interaction EPSS 0.00539 Published 2026-08-28 Fixed in 2.0.5 CWE-116

TI-2025-40060 CVE-2025-64714 · GHSA-g2j9-g8r5-rg82

PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal

LOW 33

PrivateBin is an online pastebin where the server has zero knowledge of pasted data.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00529 Published 2025-11-13 Fixed in 2.0.3 CWE-23

TI-2024-26793 CVE-2024-39899 · GHSA-mqqj-fx8h-437j

PrivateBin allows shortening of URLs for other domains

LOW 31

PrivateBin is an online pastebin where the server has zero knowledge of pasted data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00627 Published 2024-07-09 Fixed in 1.7.4 CWE-305

TI-2020-04279 CVE-2020-5223 · GHSA-8j72-p2wm-6738

Persistent XSS vulnerability in filename of attached file in PrivateBin

LOW 28

In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible.

CVSS 3.1MEDIUM 6.1 Local High privileges No interaction EPSS 0.00658 Published 2020-01-23 Fixed in 1.2.2, 1.3.2 CWE-79

TI-2026-40210 CVE-2026-55696 · GHSA-f2xf-7x3g-4272

Cross-site scripting in PrivateBin

LOW 20

PrivateBin is an online pastebin where the server has zero knowledge of pasted data.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00438 Published 2026-08-28 Fixed in 2.0.5 CWE-79

Open these records in search →

Critical	0
High	1
Medium	6
Low	0
No CVSS	1