Vulnerabilities

TI-2025-40057 CVE-2025-64711 · GHSA-r9x7-7ggj-fx9f

PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users

MEDIUM 58

PrivateBin is an online pastebin where the server has zero knowledge of pasted data.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00129 Published 2025-11-13 Fixed in 2.0.3 CWE-79

TI-2022-08646 CVE-2022-24833 · GHSA-cqcc-mm6x-vmvw

HIGH 69

PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01358 Published 2022-04-11 Fixed in v1.4.0, 1.4.0 CWE-79

TI-2020-04279 CVE-2020-5223 · GHSA-8j72-p2wm-6738

LOW 28

In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible.

CVSS 3.1MEDIUM 6.1 Local High privileges No interaction EPSS 0.00658 Published 2020-01-23 Fixed in 1.2.2, 1.3.2 CWE-79