CyberRota Analysis
AI-GeneratedVaultwarden versions prior to 1.36.0 are vulnerable to Server-Side Request Forgery (SSRF) through the /icons/{domain}/icon.png endpoint, which inadequately validates IP address formats, potentially allowing attackers to discover internal network resources. This vulnerability poses a medium risk, as it could lead to unauthorized access to sensitive internal services. Organizations using Vaultwarden should prioritize upgrading to version 1.36.0 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's /icons/{domain}/icon.png endpoint used src/http_client.rs checks including should_block_address() and post_resolve() that missed decimal, hexadecimal, and octal IP representations, allowing SSRF through the icon-fetching HTTP client for blind internal network or port discovery. This issue is fixed in version 1.36.0.