Packagist/pixelfed/pixelfed CVE-2023-0914: medium 5.3, EPSS 0.55%
Pixelfed may allow unauthorized actor to view private posts
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.11.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qh6w-pq52-qxxq
- https://nvd.nist.gov/vuln/detail/CVE-2023-0914
- https://github.com/pixelfed/pixelfed/commit/ef56f92c3d77e9bafaa70c08b7c04d5a61b8d454
- https://github.com/pixelfed/pixelfed
- https://huntr.dev/bounties/54d5fd76-e038-4eda-9e03-d5e95e09c0ec
CVE-2023-0914 · published · modified · JSON