Description
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4.
Metrics
CVSS 3.1 5.3/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| pixelfed | pixelfed/pixelfed | >= unspecified, < 0.11.4 |
References
- https://github.com/pixelfed/pixelfed/commit/5b5f5bc38ca9ba39d0b7dacc3813fb899f71ba57Patch
- https://huntr.dev/bounties/0327b1b2-6e7c-4154-a307-15f236571010Exploit, Patch, Third Party Advisory
- https://github.com/pixelfed/pixelfed/commit/5b5f5bc38ca9ba39d0b7dacc3813fb899f71ba57Patch
- https://huntr.dev/bounties/0327b1b2-6e7c-4154-a307-15f236571010Exploit, Patch, Third Party Advisory
Timeline
- Published
- Feb 18, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified