PT-2025-22853 · Bitwarden · Bitwarden

Xu17 · Published 2025-05-25 · Updated 2025-06-20 · CVE-2025-5138

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Bitwarden versions up to 2.25.1

Description A vulnerability was found in the PDF File Handler component of Bitwarden, leading to cross-site scripting. The attack can be launched remotely, and the exploit has been disclosed to the public. The vendor was contacted early about this disclosure but did not respond in any way. It is estimated that over 218,000 services may be affected. The vulnerability allows attackers to execute malicious code via crafted PDFs, potentially compromising session tokens.

Recommendations For Bitwarden versions up to 2.25.1, consider disabling the PDF File Handler component until a patch is available. Restrict access to the PDF file upload function to minimize the risk of exploitation. Avoid using the PDF file upload function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-5138

Affected Products

Bitwarden

References · 21

• 🔥 https://github.com/YZS17/CVE/blob/main/PDF%20XSS%20vulnerability%20in%20file%20upload%20function%20of%20%20Bitwarden.md · Exploit
• 🔥 https://github.com/YZS17/CVE · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-5138 · Security Note
• https://twitter.com/dailytechonx/status/1927081050188255272 · Twitter Post
• https://twitter.com/CVEnew/status/1926606807222358068 · Twitter Post
• https://t.me/thedarkwebinformer/17560 · Telegram Post
• https://vuldb.com/?ctiid.310219 · Note
• https://vuldb.com/?submit.572263 · Note
• https://reddit.com/r/CVEWatch/comments/1kz0f80/top_10_trending_cves_30052025 · Reddit Post
• https://twitter.com/VulmonFeeds/status/1926451528178528623 · Twitter Post
• https://t.me/cvenotify/123550 · Telegram Post
• https://vuldb.com/?id.310219 · Note
• https://twitter.com/barricadecyber/status/1927413788300513305 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1kwqn3j/top_10_trending_cves_27052025 · Reddit Post
• https://t.me/cvetracker/24591 · Telegram Post