Google-discovered vulnerability in Bitwarden

bw-admin · March 23, 2023, 11:47am

Hey all, just wanted to share this PR for reference: [PM-1397] Display a warning when a user attempts to auto-fill an iframe by eliykat · Pull Request #4994 · bitwarden/clients · GitHub

grb · March 23, 2023, 1:23pm

@mookbav In response to all the brouhaha about the iframe autofill behavior, Bitwarden has already implemented a hotfix patch, as dwbit mentioned above. This will be available in the next release.

Topic		Replies	Views
Autofill, should we turn it off? Password Manager app:mobile , security , server:default-cloud	19	10950	March 19, 2023
Auto-Fill Security Question Password Manager app:browser , os:windows , os:all , server:default-cloud	12	267	March 13, 2025
Add confirmation for the Auto-fill option - the exploit suggests the current warning might not be harsh enough? Password Manager app:browser	20	2814	March 21, 2023
A question about security fix for auto-filling into web pages with CSP sandbox Password Manager app:browser , server:default-cloud	3	1708	January 31, 2023
Given that automatic Autofill is considered by many to be a massive security hole, why does Bitwarden even allow it as an option? Password Manager app:all , app:browser	4	1365	February 8, 2025

Google-discovered vulnerability in Bitwarden

Related topics