CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Prion•added 2023/03/17 8:15 p.m.•23 views

Default configuration

Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where the METRICSCOLLECTOR configuration option is enabled and METRICSALLOWEDNETWORKS is set to 127.0.0.1/8 the default. A patch is available in...

5CVSS7.5AI score0.00755EPSS

SaveExploits0References4Affected Software1

Mend•added 2023/03/17 7:04 p.m.•4 views

CVE-2023-27591

Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where the "METRICSCOLLECTOR" configuration option is enabled and "METRICSALLOWEDNETWORKS" is set to "127.0.0.1/8" the default. A patch is availab...

8.7CVSS0.00755EPSS

SaveExploits0References7

Rapid7 Vulnerability Database (full)•added 2023/03/17 12:00 a.m.•2 views

CVE-2023-27591: Insufficient Granularity of Access Control

7.5CVSS5.7AI score0.00755EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by