Passbolt

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-33670 Apr 26, 01:15 PHP MEDIUM PATCH This Month

Passbolt API before 4.6.2 allows HTML injection in a URL parameter, resulting in custom content being displayed when a user visits the crafted URL. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Passbolt Api Passbolt

NVD

CVSS 3.1

4.3

EPSS

0.5%

CVE-2024-33669 Apr 26, 01:15 npm MEDIUM POC PATCH This Month

An issue was discovered in Passbolt Browser Extension before 4.6.2. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Passbolt Browser Extension Passbolt

NVD

CVSS 3.1

6.8

EPSS

0.6%

CVE-2024-33670 PHP

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

XSS Passbolt Api Passbolt

NVD

CVE-2024-33669 npm

EPSS 1% CVSS 6.8

MEDIUM POC PATCH This Month

Information Disclosure Passbolt Browser Extension Passbolt

NVD