CVE-2025-58173

Katalog CVE

CVSS 8.8 · High EPSS 0,70%

Kerentanan Improper Input Validation pada freshrss. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

FreshRSS is a self-hosted RSS feed aggregator. In versions 1.23.0 through 1.27.0, using a path traversal inside the `language` user configuration parameter, it's possible to call `install.php` and perform various administrative actions as an unprivileged user. These actions include logging in as the admin, creating a new admin user, or set the database to an attacker-controlled MySQL server and abuse it to execute code in FreshRSS by setting malicious feed `curl_params` inside the `feed` table. Version 1.27.1 fixes the issue.

Rincian

Terbit di NVD

16 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

0,70% peluang dieksploitasi; lebih tinggi dari 51,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-6c8h-w3j5-j293 exploit · patch · advisory vendor
• https://github.com/FreshRSS/FreshRSS/commit/79604aa4b3051f083d1734bd9e82c6a89d785c5a#diff-49280171b6e7964e21a0... patch
• https://github.com/FreshRSS/FreshRSS/commit/dbbae15a8458679db0f4540dacdbdcff9c02ec8c#diff-63f610c36d0f2555c178... patch
• https://github.com/FreshRSS/FreshRSS/commit/ee175dd6169a016fc898fac62d046e22c205dec0#diff-6ebff7743ede829cf5a7... patch
• https://github.com/FreshRSS/FreshRSS/pull/7878 issue tracking · patch
• https://github.com/FreshRSS/FreshRSS/pull/7971 issue tracking · patch
• https://github.com/FreshRSS/FreshRSS/pull/7979 issue tracking · patch