Lucene search
+L

53 matches found

Positive Technologies
Positive Technologies
added 2023/02/19 12:0 a.m.4 views

PT-2023-16616 · Pixelfed · Pixelfed

Name of the Vulnerable Software and Affected Versions: pixelfed/pixelfed versions prior to 0.11.4 Description: The issue is related to improper authorization in the GitHub repository pixelfed/pixelfed. Recommendations: For versions prior to 0.11.4, update to version 0.11.4 or later to resolve the...

5.3CVSS4.5AI score0.00546EPSS
SaveExploits1References8
CVE
CVE
added 2023/02/19 12:0 a.m.66 views

CVE-2023-0914

CVE-2023-0914 affects pixelfed/pixelfed versions prior to 0.11.4 due to improper authorization. Root cause is weak access control that could allow unauthorized access to content. Reported across multiple feeds (NVD/Red Hat/OSV/GHSA) with remediation guidance: update to 0.11.4 or later to resolve....

5.3CVSS4.8AI score0.00546EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/02/19 12:0 a.m.14 views

CVE-2023-0914 Improper Authorization in pixelfed/pixelfed

Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4...

4.3CVSS4.6AI score
SaveExploits0References4
CNNVD
CNNVD
added 2023/02/19 12:0 a.m.8 views

Pixelfed 安全漏洞

Pixelfed is a free and ethical photo sharing platform from the individual developers of Pixelfed. A security vulnerability exists in Pixelfed versions prior to 0.11.4 that stems from improper authorization...

5.3CVSS5AI score0.00546EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/02/19 12:0 a.m.19 views

CVE-2023-0914 Improper Authorization in pixelfed/pixelfed

Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4...

4.3CVSS5.5AI score0.00546EPSS
SaveExploits1References2
OSV
OSV
added 2023/02/18 3:30 a.m.53 views

GHSA-VJXX-JGCX-9FQ2 Pixelfed allows user enumeration via reset password functionality

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed 0.11.4 and prior...

5.3CVSS5.2AI score0.00639EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2023/02/18 3:30 a.m.25 views

Pixelfed allows user enumeration via reset password functionality

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed 0.11.4 and prior...

5.3CVSS5.5AI score0.00639EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/18 12:0 a.m.4 views

CVE-2023-0901 Exposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfed

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4...

5.3CVSS6.7AI score0.00639EPSS
SaveExploits1References2
CVE
CVE
added 2023/02/18 12:0 a.m.66 views

CVE-2023-0901

Pixelfed/pixelfed before 0.11.4 is affected by CVE-2023-0901, an information disclosure vulnerability exposing sensitive data to unauthorized actors. The connected sources indicate versions prior to 0.11.4 are vulnerable and recommend upgrading to 0.11.4 or later as a remediation. The CVSS metric...

5.3CVSS5.2AI score0.00639EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/02/18 12:0 a.m.18 views

Pixelfed 信息泄露漏洞

Pixelfed is a free and ethical photo sharing platform from the individual developers of Pixelfed. An information disclosure vulnerability exists in versions of Pixelfed prior to 0.11.4. An attacker exploiting this vulnerability could gain access to sensitive information...

5.3CVSS5.6AI score0.00639EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/02/18 12:0 a.m.3 views

PT-2023-16603 · Pixelfed · Pixelfed

Name of the Vulnerable Software and Affected Versions: pixelfed/pixelfed versions prior to 0.11.4 Description: The issue involves exposure of sensitive information to an unauthorized actor in the GitHub repository pixelfed/pixelfed. Recommendations: For versions prior to 0.11.4, update to version...

5.3CVSS5.1AI score0.00639EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2023/02/18 12:0 a.m.32 views

CVE-2023-0901 Exposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfed

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4...

5.3CVSS5.5AI score0.00639EPSS
SaveExploits1References2
OSV
OSV
added 2023/02/18 12:0 a.m.20 views

CVE-2023-0901 Exposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfed

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4...

5.3CVSS5.3AI score
SaveExploits0References4
Rows per page
Query Builder