Known Vulnerabilities for products from Tt-rss
Listed below are 6 of the newest known vulnerabilities associated with the vendor "Tt-rss".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-28373 json | The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code withou... | 7.5 - HIGH | 2021-03-13 | 2021-03-18 |
| CVE-2020-25789 json | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript inside ... | 6.1 - MEDIUM | 2020-09-19 | 2020-09-29 |
| CVE-2020-25788 json | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandle... | 8.1 - HIGH | 2020-09-19 | 2020-09-29 |
| CVE-2020-25787 json | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requesting them... | 9.8 - CRITICAL | 2020-09-19 | 2021-03-15 |
| CVE-2017-1000035 json | Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack | Not Provided | 2017-07-17 | 2025-04-20 |
| CVE-2017-16896 json | A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login paramete... | Not Provided | 2017-11-20 | 2025-04-20 |
Known software with vulnerabilities from Tt-rss
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Tt-rss | Tiny Tiny Rss | 17.4 |