CVE-2025-31482
FreshRSS vulnerable to DoS by malicious feed entry loading logout URL
Summary
FreshRSS vulnerable to DoS by malicious feed entry loading logout URL
Original description
The description as published by the source.
FreshRSS is a self-hosted RSS feed aggregator. A vulnerability in versions prior to 1.26.2 causes a user to be repeatedly logged out after fetching a malicious feed entry, effectively causing that user to suffer denial of service. Version 1.26.2 contains a patch for the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov