CVE-2017-16896

Mô tả

Tham khảo

• discourse.tt-rss.org/t/sql-injection-in-forgotpass-fixed/669 · Patch
• git.tt-rss.org/git/tt-rss/commit/2352c320c2ed34ec7df1ad22f0c55a1b26489815 · Patch

Lỗ hổng khác của tiny tiny rss

• CVE-2021-28373CAO 7.5The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid passw…
• CVE-2020-25789TRUNG BÌNH 6.1An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript inside an SVG document…
• CVE-2020-25788CAO 8.1An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles $_REQUEST["ur…
• CVE-2020-25787NGHIÊM TRỌNG 9.8An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requesting them.