Leaking Bitwarden's Vault with a Nginx vulnerability

Re:Leaking Bitwarden's Vault with a Nginx vulnerability by em1sar on Tuesday July 04, 2023 @04:00AM (#36583617)

Okay so I self-host Vaultwarden, what do I need to do to fix the vulnerability? The article mentions another flavor of the self hosted docker image though.

[ Parent | on HN ]

Re:Leaking Bitwarden's Vault with a Nginx vulnerability by jve on Tuesday July 04, 2023 @07:22AM (#36585179)

I have nginx-proxy docker container on top of vaultwarden - there aren't any alias directives there. Vaultwarden itself appears to use rust with some http framework called "rocket" [1]. Sorry I'm not familiar with rust world.

But anyways, said vuln doesn't apply to vaultwarden.

[1] https://github.com/dani-garcia/vaultwarden/blob/19e671ff25bf...

[ Parent | on HN ]

Re:Leaking Bitwarden's Vault with a Nginx vulnerability by remram on Thursday July 06, 2023 @04:14PM (#36622142)

Vaultwarden does not include or use nginx, and neither does its official Docker image. Unless you are using nginx yourself (you'd know) this does not affect you.

[ Parent | on HN ]