SUSE CVE-2025-67713

Miniflux 2 is an open source feed reader. Versions 2.2.14 and below treat redirecturl as safe when url.Parse....IsAbs is false, enabling phishing flows after login. Protocol-relative URLs like //ikotaslabs.com have an empty scheme and pass that check, allowing post-login redirects to...

CVE-2025-67713

creationtimestamp| type| source ---|---|--- 2025-12-10 03:33:58+00:00| published-proof-of-concept| https://github.com/miniflux/v2/security/advisories/GHSA-wqv2-4wpg-8hc9 2025-12-11 03:37:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7onipdevp2e...