CVE-2020-25788

HIGH

Tiny Tiny RSS <2020-09-16 - Info Disclosure

Title source: llm
STIX 2.1

Description

An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles $_REQUEST["url"] in an error message.

References (3)

Core 3

Scores

CVSS v3 8.1
EPSS 0.0119
EPSS Percentile 63.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-829
Status published
Products (1)
tt-rss/tiny_tiny_rss < 2020-09-16
Published Sep 19, 2020
Tracked Since Feb 18, 2026