PT-2026-109650

Open Source Social Network OSSN through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossn com.php that allows authenticated users to read other users' private message attachments. Attackers can request the /messages/attachment/guid route with sequenti...

PT-2020-12202

Name of the Vulnerable Software and Affected Versions Open Source Social Network OSSN versions through 5.3 Description An issue was discovered in Open Source Social Network OSSN where a user-controlled file path with a weak cryptographic rand can be used to read any file with the permissions of t...