CVE-2025-53941
Hollo renders posts received with form elements and allows submission
Résumé
Hollo renders posts received with form elements and allows submission
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Versions prior to 0.6.5 allow HTML form elements to be submitted, making the software vulnerable to HTML injection. Version 0.6.5 fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com