Rsshub

Rsshub

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2024-27926

  • EPSS 1%
  • Veröffentlicht 21.03.2024 02:52:21
  • Zuletzt bearbeitet 04.12.2025 19:27:41

RSSHub is an open source RSS feed generator. Starting in version 1.0.0-master.cbbd829 and prior to version 1.0.0-master.d8ca915, ahen the specially crafted image is supplied to the internal media proxy, it proxies the image without handling XSS vulne...

6.5

CVE-2024-27927

Exploit
  • EPSS 1.05%
  • Veröffentlicht 21.03.2024 02:52:21
  • Zuletzt bearbeitet 04.12.2025 19:27:29

RSSHub is an open source RSS feed generator. Prior to version 1.0.0-master.a429472, RSSHub allows remote attackers to use the server as a proxy to send HTTP GET requests to arbitrary targets and retrieve information in the internal network or conduct...

6.1

CVE-2023-26491

  • EPSS 0.84%
  • Veröffentlicht 03.03.2023 23:15:12
  • Zuletzt bearbeitet 21.11.2024 07:51:37

RSSHub is an open source and extensible RSS feed generator. When the URL parameters contain certain special characters, it returns an error page that does not properly handle XSS vulnerabilities, allowing for the execution of arbitrary JavaScript cod...

7.5

CVE-2023-22493

Exploit
  • EPSS 0.12%
  • Veröffentlicht 13.01.2023 15:15:09
  • Zuletzt bearbeitet 21.11.2024 07:44:55

RSSHub is an open source RSS feed generator. RSSHub is vulnerable to Server-Side Request Forgery (SSRF) attacks. This vulnerability allows an attacker to send arbitrary HTTP requests from the server to other servers or resources on the network. An at...

7.5

CVE-2022-31110

Exploit
  • EPSS 0.56%
  • Veröffentlicht 29.06.2022 18:15:08
  • Zuletzt bearbeitet 21.11.2024 07:03:54

RSSHub is an open source, extensible RSS feed generator. In commits prior to 5c4177441417 passing some special values to the `filter` and `filterout` parameters can cause an abnormally high CPU. This results in an impact on the performance of the ser...

9.8

CVE-2021-21278

  • EPSS 0.45%
  • Veröffentlicht 26.01.2021 21:15:12
  • Zuletzt bearbeitet 21.11.2024 05:47:55

RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 (non-semantic versioning) there is a risk of code injection. Some routes use `eval` or `Function constructor`, which may be injected by the tar...