Pixelfed may allow unauthorized actor to view private posts

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-0914 · ADVISORY
• pixelfed/pixelfed commit ef56f92 · WEB
• pixelfed/pixelfed · PACKAGE
• huntr.dev/bounties/54d5fd76-e038-4eda-9e03-d5e95e09c0ec · WEB

Lỗ hổng khác của pixelfed/pixelfed

• CVE-2025-30741TRUNG BÌNH 4.3Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhe…
• CVE-2024-25108CAO 8.8Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowin…
• CVE-2023-0901TRUNG BÌNH 5.3Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4.