CVE-2025-31482
FreshRSS vulnerable to DoS by malicious feed entry loading logout URL
Résumé
FreshRSS vulnerable to DoS by malicious feed entry loading logout URL
Description d'origine
La description telle que publiée par la source (souvent en anglais).
FreshRSS is a self-hosted RSS feed aggregator. A vulnerability in versions prior to 1.26.2 causes a user to be repeatedly logged out after fetching a malicious feed entry, effectively causing that user to suffer denial of service. Version 1.26.2 contains a patch for the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov