Pixelfed may allow unauthorized actor to view private posts

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-0914 · ADVISORY
• pixelfed/pixelfed commit ef56f92 · WEB
• pixelfed/pixelfed · PACKAGE
• huntr.dev/bounties/54d5fd76-e038-4eda-9e03-d5e95e09c0ec · WEB

pixelfed/pixelfed のその他の脆弱性

• CVE-2025-30741中 4.3Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhe…
• CVE-2024-25108高 8.8Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowin…
• CVE-2023-0901中 5.3Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4.