Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Friendica Subscribe
Filtered by product Friendica
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-30141 1 Friendica 1 Friendica 2021-04-15 5.0 MEDIUM 7.5 HIGH
** DISPUTED ** Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states "the feature still requires a valid authentication cookie even if the route is accessible to non-logged users."