Unauthorized access to icons #28

Closed
opened 2025-07-08 08:37:47 -04:00 by AtHeartEngineer · 0 comments

Originally created by @showhwa on 6/25/2025

Vaultwarden Support String

Unrelated

Vaultwarden Build Version

Vaultwarden 1.34.1 Web-Vault 2025.5.0

Deployment method

Official Container Image

Custom deployment method

Unrelated

Reverse Proxy

nginx version: nginx/1.22.1 from apt-get

Host/Server Operating System

Linux

Operating System Version

Unrelated

Clients

Web Vault

Client Version

Unrelated

Steps To Reproduce

  1. Open any incognito tab
  2. Open https://{domain}/icons/Github.com/icon.png or https://{domain}/icons/google.com/icon.png
  3. enter

Expected Result

401: Unauthorized

Actual Result

show icons

Logs


Screenshots or Videos

Image

Additional Context

https://{domain}/icons/google.com/icon.png
https://{domain}/icons/youtube.com/icon.png
https://{domain}/icons/Github.com/icon.png
https://{domain}/icons/github.com/icon.png
https://{domain}/icons/{site-domain}/icon.png

*Originally created by @showhwa on 6/25/2025* ### Vaultwarden Support String Unrelated ### Vaultwarden Build Version Vaultwarden 1.34.1 Web-Vault 2025.5.0 ### Deployment method Official Container Image ### Custom deployment method Unrelated ### Reverse Proxy nginx version: nginx/1.22.1 from apt-get ### Host/Server Operating System Linux ### Operating System Version Unrelated ### Clients Web Vault ### Client Version Unrelated ### Steps To Reproduce 1. Open any incognito tab 2. Open https://{domain}/icons/Github.com/icon.png or https://{domain}/icons/google.com/icon.png 3. enter ### Expected Result 401: Unauthorized ### Actual Result show icons ### Logs ```text ``` ### Screenshots or Videos ![Image](https://github.com/user-attachments/assets/6ecfab93-a098-47d3-81e1-66156a1d4c45) ### Additional Context https://{domain}/icons/google.com/icon.png https://{domain}/icons/youtube.com/icon.png https://{domain}/icons/Github.com/icon.png https://{domain}/icons/github.com/icon.png https://{domain}/icons/{site-domain}/icon.png
AtHeartEngineer added the bugbugbugbugbugbugbugbugbugbugbugbugbugbugbugbugbug labels 2025-07-08 08:37:48 -04:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github/vaultwarden#28