Passbolt

4 CVEs across 3 Passbolt products. Browse Passbolt vulnerabilities, severities, and proof-of-concept exploits.

Passbolt products with known CVEs

ProductCVEs
Passbolt API3
API1
Passbolt Browser Extension1
Passbolt CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-27913High7.52025-03-10Passbolt API before 5, if the server is misconfigured (with an incorrect installation process and disregarding of Health Check results), can send email message…
CVE-2024-33670Medium4.32024-04-26Passbolt API before 4.6.2 allows HTML injection in a URL parameter, resulting in custom content being displayed when a user visits the crafted URL. Although th…
CVE-2024-33669Medium6.12024-04-26An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple requests to HaveIBeenPwned while a password is being typed, which resu…
CVE-2017-1000442Medium5.42018-01-02Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace