Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: opensource-socialnetwork Clear all filters
TI-2026-70945 CVE-2026-108950 · GHSA-2j53-hvmv-r3h4

Missing authorization in OSSN exposes album photos and stored files

Priority LOW 36

Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler that allows unauthenticated attackers to download files via album/getphoto and album/getcover.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00326 Published 2026-10-12 No fix listed CWE-862
TI-2026-70532 CVE-2026-108164 · GHSA-6qx6-fpjx-pg68

Authorization bypass in OSSN exposes private message attachments

Priority MEDIUM 64

Open Source Social Network (OSSN) through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossn_com.php that allows authenticated users to read other users' private message attac…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00257 Published 2026-10-10 No fix listed CWE-639