Debian/tt-rss: critical 9.8
A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter.
Action: Upgrade tt-rss to 17.4+git20180312+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 17.4+git20180312+dfsg-1 | - |
Fixed versions
| 17.4+git20180312+dfsg-1 |
Sources
published · modified · JSON