GHSA-QH6W-PQ52-QXXQ Pixelfed may allow unauthorized actor to view private posts

Improper Authorization in GitHub repository pixelfed/pixelfed 0.11.4 and prior...

Pixelfed may allow unauthorized actor to view private posts

Improper Authorization in GitHub repository pixelfed/pixelfed 0.11.4 and prior...

CVE-2023-0914

Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4...

Authorization

Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4...

Pixelfed 安全漏洞

Pixelfed is a free and ethical photo sharing platform from the individual developers of Pixelfed. A security vulnerability exists in Pixelfed versions prior to 0.11.4 that stems from improper authorization...

CVE-2023-0914 Improper Authorization in pixelfed/pixelfed

Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4...

CVE-2023-0914 Improper Authorization in pixelfed/pixelfed

Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4...

PT-2023-16616 · Pixelfed · Pixelfed

Name of the Vulnerable Software and Affected Versions: pixelfed/pixelfed versions prior to 0.11.4 Description: The issue is related to improper authorization in the GitHub repository pixelfed/pixelfed. Recommendations: For versions prior to 0.11.4, update to version 0.11.4 or later to resolve the...

CVE-2023-0914: Improper Authorization

Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4...

CVE-2023-0914

Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4...

CVE-2023-0914

CVE-2023-0914 affects pixelfed/pixelfed versions prior to 0.11.4 due to improper authorization. Root cause is weak access control that could allow unauthorized access to content. Reported across multiple feeds (NVD/Red Hat/OSV/GHSA) with remediation guidance: update to 0.11.4 or later to resolve....

Pixelfed allows user enumeration via reset password functionality

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed 0.11.4 and prior...

GHSA-VJXX-JGCX-9FQ2 Pixelfed allows user enumeration via reset password functionality

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed 0.11.4 and prior...

Pixelfed 信息泄露漏洞

Pixelfed is a free and ethical photo sharing platform from the individual developers of Pixelfed. An information disclosure vulnerability exists in versions of Pixelfed prior to 0.11.4. An attacker exploiting this vulnerability could gain access to sensitive information...

CVE-2023-0901 Exposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfed

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4...

PT-2023-16603 · Pixelfed · Pixelfed

Name of the Vulnerable Software and Affected Versions: pixelfed/pixelfed versions prior to 0.11.4 Description: The issue involves exposure of sensitive information to an unauthorized actor in the GitHub repository pixelfed/pixelfed. Recommendations: For versions prior to 0.11.4, update to version...

CVE-2023-0901 Exposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfed

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4...

CVE-2023-0901 Exposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfed

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4...

CVE-2023-0901: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4...

CVE-2023-0901

Pixelfed/pixelfed before 0.11.4 is affected by CVE-2023-0901, an information disclosure vulnerability exposing sensitive data to unauthorized actors. The connected sources indicate versions prior to 0.11.4 are vulnerable and recommend upgrading to 0.11.4 or later as a remediation. The CVSS metric...