CVE-2020-15879 | BDVDB-2026-139293 Detail

Description#

Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe, or ff, and the :: address) and certain IPv4 addresses (0.0.0.0/8, 127.0.0.0/8, and 169.254.0.0/16).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/bitwarden/server/pull/827

Exploit#

No public exploit known

History#

Version 12020-07-21Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.