Vulnerabilities

TI-2024-16563 CVE-2024-25108 · GHSA-gccq-h3xj-jgvf

Insufficient authorization allowing elevated access to resources in pixelfed

HIGH 76

Pixelfed is an open source photo sharing platform.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.00678 Published 2024-02-12 Fixed in 0.11.11 CWE-280

TI-2023-00866 CVE-2023-0914 · GHSA-qh6w-pq52-qxxq

LOW 25

Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00551 Published 2023-02-19 Fixed in 0.11.4 CWE-285

TI-2023-00853 CVE-2023-0901 · GHSA-vjxx-jgcx-9fq2

MEDIUM 63

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00639 Published 2023-02-18 Fixed in 0.11.4 CWE-200