Vulnerabilities

PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expire_after_views limits.

PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorization vulnerability in the push deletion logic.

PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and per-push lockout mechanisms.

Password Pusher is an open source application to communicate sensitive information over the web.

Password Pusher, an open source application to communicate sensitive information over the web, comes with a configurable rate limiter.

Password Pusher is an open source application to communicate sensitive information over the web.