cvedb.io
CVE-2023-27974
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2023-03-09T00:15:09.930 · Last modified 2026-06-17T05:46:17.390

Summary

Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for an example.com hosting provider when customer-website.example.com is visited. NOTE: the vendor's position is that "Auto-fill on page load" is not enabled by default.

Affected products

bitwarden — bitwarden

Does this affect you?

Add your gear to cvedb and we'll alert you only when bitwarden ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.