Vulnerabilidades do Apnotic Password Pusher

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Apnotic Password Pusher: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:apnotic:password_pusher

CVE-2026-41308 Média · 6.5 CWE-288 08/05/2026

Password Pusher: JSON API `/p.json` file upload alias bypasses file-push authentication

Password Pusher is an open source application to communicate sensitive information over the web. Prior to versions 1.69.3 and 2.4.2, a security issue in OSS PasswordPusher allowed unauthenticated creation of file-type pushes through a generic JSON API create path under certain configurations. This could bypass the intended authentication boundary for file push creation. This issue has been patched in versions 1.69.3 and 2.4.2.