CVE-2023-0901
1 advisory.
Packagist/pixelfed/pixelfed CVE-2023-0901: medium 5.3, EPSS 0.64%
Pixelfed allows user enumeration via reset password functionality
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.11.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vjxx-jgcx-9fq2
- https://nvd.nist.gov/vuln/detail/CVE-2023-0901
- https://github.com/pixelfed/pixelfed/commit/5b5f5bc38ca9ba39d0b7dacc3813fb899f71ba57
- https://github.com/pixelfed/pixelfed
- https://huntr.dev/bounties/0327b1b2-6e7c-4154-a307-15f236571010
CVE-2023-0901 · published · modified · JSON