CVE-2025-31482

概要

参考情報

• FreshRSS/FreshRSS security advisory · Exploit

freshrss のその他の脆弱性

• CVE-2025-62166高 7.5FreshRSS is a free, self-hostable RSS aggregator. Prior 1.28.0, a bug in the auth logic related to master authentication tokens, this restri…
• CVE-2025-68932緊急 9.8FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.28.0, FreshRSS uses cryptographically weak random number generators (mt…
• CVE-2025-68148高 7.5FreshRSS is a free, self-hostable RSS aggregator. From version 1.27.0 to before 1.28.0, An attacker could globally deny access to feeds via …
• CVE-2025-59949中 6.5FreshRSS is a free, self-hostable RSS aggregator. Versions prior to 1.27.1 have a logout cross-site request forgery vulnerability that can l…
• CVE-2025-58173高 8.8FreshRSS is a self-hosted RSS feed aggregator. In versions 1.23.0 through 1.27.0, using a path traversal inside the `language` user configur…