Privatebin

6 CVEs across 1 Privatebin products. Browse Privatebin vulnerabilities, severities, and proof-of-concept exploits.

Privatebin products with known CVEs

ProductCVEs
Privatebin6
Privatebin CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-64714Medium5.82025-11-13PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior to version 2.0.3, an unauthenticated L…
CVE-2025-64711Low3.92025-11-13PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior to version 2.0.3, dragging a file whos…
CVE-2025-62796Medium5.82025-10-28PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Versions 1.7.7 through 2.0.1 allow persistent HTML injection via the unsan…
CVE-2024-39899Medium5.32024-07-09PrivateBin is an online pastebin where the server has zero knowledge of pasted data. In v1.5, PrivateBin introduced the YOURLS server-side proxy. The idea was…
CVE-2022-24833High8.22022-04-11PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin < v1.4.0 a cross-site scripting (…
CVE-2020-5223Medium6.12020-01-23In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment fi…