83 matches found
CVE-2024-25864
Friendica (post-2023.12 versions) is affected by a Server-Side Request Forgery (SSRF) in the fpostit.php component. The underlying issue enables a remote attacker to cause arbitrary code execution and obtain sensitive information. The vulnerability is documented across multiple feeds, with remedi...
CVE-2024-26495
Cross Site Scripting XSS vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the BBCode tags in the post content and post comments function...
CVE-2024-26495
Cross Site Scripting XSS vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the BBCode tags in the post content and post comments function...
Friendica 安全漏洞
Friendica is an application of the German Friendica community. Provides decentralized social networking. A security vulnerability exists in Friendica versions after v.2023.12. A remote attacker could exploit the vulnerability to execute arbitrary code and obtain sensitive information via BBCode...
CVE-2024-25864
Server Side Request Forgery SSRF vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the fpostit.php component...
CVE-2024-25864
Server Side Request Forgery SSRF vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the fpostit.php component...
PT-2024-21170 · Friendica · Friendica
Name of the Vulnerable Software and Affected Versions: Friendica versions after v.2023.12 Description: A Server Side Request Forgery SSRF issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the fpostit.php component. Recommendations: For Friendica version...
PT-2024-21407 · Friendica · Friendica
Name of the Vulnerable Software and Affected Versions: Friendica versions after v.2023.12 Description: The issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the BBCode tags in the post content and post comments function. This is a Cross Site Scripting X...
CVE-2021-30141
Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states "the feature still requires a valid...
CVE-2021-30141
Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states "the feature still requires a valid...
Design/Logic Flaw
DISPUTED Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states "the feature still requires a...
CVE-2021-30141
CVE-2021-30141 concerns Friendica versions through 2021.01. The issue is in Module/Settings/UserExport.php where the settings/userexport route can be accessed by anonymous users, potentially triggering an attempted access to an array offset on a null value and causing excessive memory consumption...
CVE-2021-30141
Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states "the feature still requires a valid...
CVE-2021-30141
Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states "the feature still requires a valid...
Friendica 安全漏洞
Friendica is an application for the German Friendica community. Provides decentralized social networking. A security vulnerability exists in Friendica version 2021.01 and earlier versions of Module/Settings/UserExport.php, which allows anonymous users to use userexport settings...
PT-2021-18628 · Friendica · Friendica
Name of the Vulnerable Software and Affected Versions: Friendica versions through 2021.01 Description: The issue allows the settings/userexport feature to be accessed by anonymous users, potentially leading to excessive memory consumption and attempted access to an array offset on a value of type...
Friendica Server-Side Request Forgery Vulnerability
Friendica is an application for the German Friendica community. Provides decentralized social networking. A server-side request forgery vulnerability exists in Friendica version 2021.01. The vulnerability stems from allowing DNS lookups and HTTP requests for arbitrary domains via parseurl?binurl=...
CVE-2021-27329
Friendica 2021.01 allows SSRF via parseurl?binurl= for DNS lookups or HTTP requests to arbitrary domain names...