Bitwarden PDF File Handler Vulnerability Let Attackers Upload Malicious PDF File \ stacker news ~security

pull down to refresh

Bitwarden PDF File Handler Vulnerability Let Attackers Upload Malicious PDF File cybersecuritynews.com/bitwarden-pdf-file-handler-vulnerability/amp/

40 sats \ 0 comments \ @ch0k1 29 May security

A critical cross-site scripting (XSS) vulnerability has been discovered in the popular password manager Bitwarden, affecting versions up to 2.25.1.

The security flaw, designated as CVE-2025-5138, resides in the PDF File Handler component and allows attackers to upload malicious PDF files that can execute arbitrary code when viewed by users.

view all related items