Cross site request forgery (csrf)

FreshRSS is a self-hosted RSS feed aggregator. When using the greader API, the provided password is logged in clear in users//logapi.txt in the case where the authentication fails. The issues occurs in authorizationToUser in greader.php. If there is an issue with the request or the credentials,...

CVE-2023-22481

FreshRSS is a self-hosted RSS feed aggregator. When using the greader API, the provided password is logged in clear in "users//logapi.txt" in the case where the authentication fails. The issues occurs in "authorizationToUser" in "greader.php". If there is an issue with the request or the...

PT-2023-18533

Name of the Vulnerable Software and Affected Versions FreshRSS affected versions not specified Description FreshRSS is a self-hosted RSS feed aggregator. When using the greader API, the provided password is logged in clear in users/ /log api.txt in the case where the authentication fails. The iss...