Tiny Tiny RSS跨站脚本漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://avd.aliyun.com/detail?id=AVD-2020-25789
• https://nvd.nist.gov/vuln/detail/CVE-2020-25789
• https://www.cvedetails.com/cve/CVE-2017-1000035/
• https://app.opencve.io/cve/?vendor=tt-rss&product=tiny_tiny_rss
• https://github.com/advisories/GHSA-9gc3-6fq8-9hxj
• https://www.digeex.de/blog/tinytinyrss/
• https://www.exploit-db.com/exploits/49606
• https://dbugs.ptsecurity.com/vulnerability/PT-2020-16209
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000035
• https://community.tt-rss.org/t/heads-up-several-vulnerabilities-fixed/3799

Related Vulnerabilities

• Tiny Tiny RSSTiny Tiny RSS包含不受信任的控制领域的功能漏洞