Tiny Tiny RSSTiny Tiny RSS包含不受信任的控制领域的功能漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-25787
• https://github.com/advisories/GHSA-8966-pp95-9j6j
• https://www.exploit-db.com/exploits/49606
• https://app.opencve.io/cve/?vendor=tt-rss&product=tiny_tiny_rss
• https://www.cvedetails.com/cve/CVE-2020-25787/
• https://www.tenable.com/cve/CVE-2020-25787
• https://nvd.nist.gov/vuln/detail/CVE-2020-25788

Related Vulnerabilities

• Tiny Tiny RSS跨站脚本漏洞