agentprime: freshrssEvery new CVE for freshrss.https://agentprime.io/CVE-2025-68402: FreshRSS has an authentication bypass due to truncated bcrypt hash [edge branch]https://agentprime.io/advisories/CVE-2025-68402/https://agentprime.io/advisories/CVE-2025-68402/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Mar 2026 19:41:57 GMTCVECVE-2025-62166: FreshRSS has an IDOR which allows for viewing feeds of any user and leaking tokenshttps://agentprime.io/advisories/CVE-2025-62166/https://agentprime.io/advisories/CVE-2025-62166/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Mar 2026 19:35:37 GMTCVECVE-2025-68148: FreshRSS globally denies access to feed via proxy modifying to 429 Retry-Afterhttps://agentprime.io/advisories/CVE-2025-68148/https://agentprime.io/advisories/CVE-2025-68148/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Dec 2025 23:46:53 GMTCVECVE-2025-68932: FreshRSS has weak cryptographic randomness in remember-me token and nonce generationhttps://agentprime.io/advisories/CVE-2025-68932/https://agentprime.io/advisories/CVE-2025-68932/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Dec 2025 23:43:34 GMTCVECVE-2025-59949: FreshRSS has Logout CSRF that Leads to DoS via <track src>https://agentprime.io/advisories/CVE-2025-59949/https://agentprime.io/advisories/CVE-2025-59949/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 18:31:54 GMTCVECVE-2025-58173: FreshRSS vulnerable to authenticated RCE via path traversal inside include()https://agentprime.io/advisories/CVE-2025-58173/https://agentprime.io/advisories/CVE-2025-58173/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Dec 2025 23:07:25 GMTCVECVE-2025-59950: FreshRSS: Double clickjacking can lead to privilege escalationhttps://agentprime.io/advisories/CVE-2025-59950/https://agentprime.io/advisories/CVE-2025-59950/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Sep 2025 23:21:42 GMTCVECVE-2025-61586: FreshRSS is vulnerable to directory enumeration by setting path in its theme fieldhttps://agentprime.io/advisories/CVE-2025-61586/https://agentprime.io/advisories/CVE-2025-61586/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Sep 2025 23:14:51 GMTCVECVE-2025-59948: FreshRSS is vulnerable to XSS due to lack of CSP on HTML query pagehttps://agentprime.io/advisories/CVE-2025-59948/https://agentprime.io/advisories/CVE-2025-59948/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Sep 2025 22:56:46 GMTCVECVE-2025-57769: FressRSS: Clickjacking can lead to XSS and/or privilege escalationhttps://agentprime.io/advisories/CVE-2025-57769/https://agentprime.io/advisories/CVE-2025-57769/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Sep 2025 21:37:29 GMTCVECVE-2025-54875: FreshRSS: Unauthorized creation of admin user when registration is enabledhttps://agentprime.io/advisories/CVE-2025-54875/https://agentprime.io/advisories/CVE-2025-54875/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Sep 2025 21:29:50 GMTCVEcriticalCVE-2025-54592: FreshRSS has Incomplete Session Termination on Logouthttps://agentprime.io/advisories/CVE-2025-54592/https://agentprime.io/advisories/CVE-2025-54592/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Sep 2025 21:23:43 GMTCVECVE-2025-54591: FreshRSS: Unauthenticated users can view default user's informationhttps://agentprime.io/advisories/CVE-2025-54591/https://agentprime.io/advisories/CVE-2025-54591/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Sep 2025 21:00:50 GMTCVECVE-2025-54593: FreshRSS is vulnerable to RCE attacks by authenticated adminhttps://agentprime.io/advisories/CVE-2025-54593/https://agentprime.io/advisories/CVE-2025-54593/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 Aug 2025 18:04:40 GMTCVECVE-2025-46341: Privilege escalation via SSRF when using HTTP authhttps://agentprime.io/advisories/CVE-2025-46341/https://agentprime.io/advisories/CVE-2025-46341/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Jun 2025 20:09:18 GMTCVECVE-2025-46339: FreshRSS vulnerable to favicon cache poisoning via proxyhttps://agentprime.io/advisories/CVE-2025-46339/https://agentprime.io/advisories/CVE-2025-46339/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Jun 2025 20:04:54 GMTCVECVE-2025-32015: FreshRSS vulnerable to Cross-site Scripting by embedding <script> tag inside <iframe srcdoc>https://agentprime.io/advisories/CVE-2025-32015/https://agentprime.io/advisories/CVE-2025-32015/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Jun 2025 19:59:39 GMTCVECVE-2025-31482: FreshRSS vulnerable to DoS by malicious feed entry loading logout URLhttps://agentprime.io/advisories/CVE-2025-31482/https://agentprime.io/advisories/CVE-2025-31482/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Jun 2025 19:50:58 GMTCVECVE-2025-31136: FreshRSS vulnerable to Cross-site Scripting by <iframe>'ing a vulnerable same-origin page in a feed entryhttps://agentprime.io/advisories/CVE-2025-31136/https://agentprime.io/advisories/CVE-2025-31136/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Jun 2025 19:42:15 GMTCVECVE-2025-31134: FreshRSS vulnerable to directory enumeration via ext.phphttps://agentprime.io/advisories/CVE-2025-31134/https://agentprime.io/advisories/CVE-2025-31134/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Jun 2025 19:35:55 GMTCVECVE-2023-22481: Sensitive information exposure in the logs of greader API in FreshRSShttps://agentprime.io/advisories/CVE-2023-22481/https://agentprime.io/advisories/CVE-2023-22481/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Mar 2023 17:33:03 GMTCVECVE-2022-23497: Insecure file access in FreshRSShttps://agentprime.io/advisories/CVE-2022-23497/https://agentprime.io/advisories/CVE-2022-23497/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Dec 2022 22:16:00 GMTCVE