CVE-2020-10560

An issue was discovered in Open Source Social Network OSSN through 5.3. A user-controlled file path with a weak cryptographic rand can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the...

PT-2020-12202

Name of the Vulnerable Software and Affected Versions Open Source Social Network OSSN versions through 5.3 Description An issue was discovered in Open Source Social Network OSSN where a user-controlled file path with a weak cryptographic rand can be used to read any file with the permissions of t...