CVE-2024-25108

Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to access far more functionality than users intended, including to the administrative and moderator functionality of the Pixelfed server. This...

CVE-2024-25108 Insufficient authorization allowing elevated access to resources in pixelfed

Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to access far more functionality than users intended, including to the administrative and moderator functionality of the Pixelfed server. This...

CVE-2024-25108

Pixelfed suffers an authorization-check bypass that lets authenticated users obtain access to administrative and moderator functionality. Affected versions are v0.10.4 through v0.11.9 (inclusive); a proof-of-concept exists. Root cause: improper and insufficient checks during request processing al...