cve.bz

pglombardo passwordpusher vulnerabilities in 2024, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 5.7CVE-2024-56733EPSS 0.2%

    Password Pusher is an open source application to communicate sensitive information over the web. A vulnerability has been reported in versions 1.50.3 and prior where an attacker can copy the session cookie before a user logs out, potential…

  2. 5.3CVE-2024-52796EPSS 0.5%

    Password Pusher, an open source application to communicate sensitive information over the web, comes with a configurable rate limiter. In versions prior to v1.49.0, the rate limiter could be bypassed by forging proxy headers allowing bad …

  3. 7.1CVE-2024-51989EPSS 0.4%

    Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting (XSS) vulnerability was identified in the PasswordPusher application, affecting versions `v1.41.1` through and includin…