miniflux.app/v2 vulnerabilities (Go)
6 vulnerabilities.
-
miniflux.app/v2Go Miniflux 2: Open Redirect Bypass 5.1 Medium -
miniflux.app/v2Go Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources 6.5 Medium -
miniflux.app/v2Go Miniflux 2 has an Open Redirect via protocol-relative `redirect_url` 5.3 Medium -
miniflux.app/v2Go Stored XSS in Miniflux Media Proxy due to improper Content-Security-Policy configuration 4.8 Medium -
miniflux.app/v2Go Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics 7.5 High -
miniflux.app/v2Go Stored XSS in Miniflux when opening a broken image due to unescaped ServerError in proxy handler 4.8 Medium