Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29342
HistoryFeb 10, 2021 - 9:19 a.m.

Arbitrary Code Execution

2021-02-1009:19:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
tt-rss
arbitrary code execution
url validation
host os
software

EPSS

0.325

Percentile

97.1%

tt-rss is vulnerable to arbitrary code execution. Lack of URL validation before requests are made allows an attacker to potentially obtain arbitrary code execution on the host OS.