CVE-2017-16896

Description

References

• discourse.tt-rss.org/t/sql-injection-in-forgotpass-fixed/669 · Patch
• git.tt-rss.org/git/tt-rss/commit/2352c320c2ed34ec7df1ad22f0c55a1b26489815 · Patch

Weitere Schwachstellen in tiny tiny rss

• CVE-2021-28373HOCH 7.5The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid passw…
• CVE-2020-25789MITTEL 6.1An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript inside an SVG document…
• CVE-2020-25788HOCH 8.1An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles $_REQUEST["ur…
• CVE-2020-25787KRITISCH 9.8An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requesting them.