CVE-2018-19782

Mô tả

Tham khảo

• packetstormsecurity.com/files/150608/FreshRSS-1.11.1-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2018/Dec/3 · Exploit
• exploit-db.com/exploits/45954 · Exploit
• netsparker.com/web-applications-advisories/ns-18-024-multiple-cross-site-scripting-vulnerabilities-in-freshrss · Exploit

Lỗ hổng khác của freshrss

• CVE-2025-62166CAO 7.5FreshRSS is a free, self-hostable RSS aggregator. Prior 1.28.0, a bug in the auth logic related to master authentication tokens, this restri…
• CVE-2025-68932NGHIÊM TRỌNG 9.8FreshRSS is a free, self-hostable RSS aggregator. Prior to version 1.28.0, FreshRSS uses cryptographically weak random number generators (mt…
• CVE-2025-68148CAO 7.5FreshRSS is a free, self-hostable RSS aggregator. From version 1.27.0 to before 1.28.0, An attacker could globally deny access to feeds via …
• CVE-2025-59949TRUNG BÌNH 6.5FreshRSS is a free, self-hostable RSS aggregator. Versions prior to 1.27.1 have a logout cross-site request forgery vulnerability that can l…
• CVE-2025-58173CAO 8.8FreshRSS is a self-hosted RSS feed aggregator. In versions 1.23.0 through 1.27.0, using a path traversal inside the `language` user configur…