Hubzilla

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Hubzilla records in CISA KEV

No Hubzilla vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hubzilla 3 records LOW

Records

4 records

TI-2026-49277 CVE-2026-70556 · GHSA-q8qh-69f5-v25q

Hubzilla version prior to 11.4 CSRF via OAuth2 /authorize Endpoint App Registration

MEDIUM 56

Hubzilla versions prior to 11.4 contains a cross-site request forgery vulnerability in the OAuth2 /authorize endpoint handled by Zotlabs\Module\Authorize::post() that allows unauthenticated attackers to register arbitrar…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0019 Published 2026-08-06 Fixed in 11.4 CWE-352

TI-2022-10373 CVE-2022-27257 · GHSA-7p22-9f27-w6fq

A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before…

LOW 35

A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01285 Published 2022-04-15 No fix listed

TI-2022-10372 CVE-2022-27256 · GHSA-hvpp-qrxv-c9g3

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before…

LOW 30

A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01488 Published 2022-04-13 No fix listed CWE-601

TI-2022-10374 CVE-2022-27258 · GHSA-qx2r-h2pf-6vgp

Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows…

LOW 29

Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00733 Published 2022-04-15 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0