1 matches found
CVE-2021-30141: Missing Release of Memory after Effective Lifetime
Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states "the feature still requires a valid...
7.5CVSS5.8AI score0.01517EPSS
SaveExploits1References2
20