CVE-2025-53941
Hollo renders posts received with form elements and allows submission
概要
Hollo renders posts received with form elements and allows submission
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Versions prior to 0.6.5 allow HTML form elements to be submitted, making the software vulnerable to HTML injection. Version 0.6.5 fixes the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com