CVE-2020-25788

High

An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles…

mitre·CWE-829·Published 2020-09-19

CVSS

8.1

EPSS

0.01

KEV

Exploits

cve.orgen

164 chars

An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles $_REQUEST["url"] in an error message.

NVDen

164 chars

An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles $_REQUEST["url"] in an error message.

Se detectó un problema en Tiny Tiny RSS (también se conoce como tt-rss) antes del 16-09-2020. La función imgproxy en el archivo plugins/af_proxy_http/init.php maneja inapropiadamente $ _REQUEST ["url"] en un mensaje de error

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H