CVE-2025-31482
FreshRSS vulnerable to DoS by malicious feed entry loading logout URL
概要
FreshRSS vulnerable to DoS by malicious feed entry loading logout URL
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
FreshRSS is a self-hosted RSS feed aggregator. A vulnerability in versions prior to 1.26.2 causes a user to be repeatedly logged out after fetching a malicious feed entry, effectively causing that user to suffer denial of service. Version 1.26.2 contains a patch for the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov