Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Debian Subscribe
Filtered by product Freedombox
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-25073 1 Debian 1 Freedombox 2020-09-11 5.0 MEDIUM 5.3 MEDIUM
FreedomBox through 20.13 allows remote attackers to obtain sensitive information from the /server-status page of the Apache HTTP Server, because a connection from the Tor onion service (or from PageKite) is considered a local connection. This affects both the freedombox and plinth packages of some Linux distributions, but only if the Apache mod_status module is enabled.