CVE-2020-15879

Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe, or ff, and the :: address) and certain…

published July 21, 2020

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe, or ff, and the :: address) and certain IPv4 addresses (0.0.0.0/8, 127.0.0.0/8, and 169.254.0.0/16).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02699 · 85.8th percentile
Published
2020-07-21T16:59Z
EPSS history
Timeline
  • 21 JUL 16:59Z
    Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe, or ff, and the :: address) and certain…
    cvelistv5