Freedomofpress Securedrop vulnerabilities
- freedom of the press securedrop SecureDrop: Onion Service client auth credentials copied to Monitor Server 2.6 Low
- freedom of the press securedrop SecureDrop: API session token reuse against the Journalist Interface web UI 5.0 Medium
- freedomofpress securedrop-client securedrop-proxy origin limitation can be bypassed with redirects 3.7 Low
- freedom securedrop-client SecureDrop Client has path injection in read_gzip_header_filename() 7.5 High
- freedomofpress securedrop-client Path traversal in sd-log Qubes virtual machine 4.5 Medium
- freedomofpress securedrop-client Path traversal in SecureDrop Client API.download_reply() 8.1 High