pixelfed records

3 published records for vendor pixelfed.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-25108No exploit	Insufficient authorization allowing elevated access to resources in pixelfedpixelfed · pixelfed · CWE-280	High8.8	—	0.6%	Feb 12, 2024
21Monitor	CVE-2023-0901No exploit	Exposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfedpixelfed · pixelfed · CWE-200 Pre-auth Info leak	Medium5.3	—	0.6%	Feb 17, 2023
21Monitor	CVE-2023-0914No exploit	Improper Authorization in pixelfed/pixelfedpixelfed · pixelfed · CWE-285 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.5%	Feb 18, 2023

CVE-2024-25108
35Monitor
Insufficient authorization allowing elevated access to resources in pixelfed
HighCVSS 8.8No exploitEPSS 0%
pixelfed · pixelfedFeb 12, 2024
CVE-2023-0901
21Monitor
Exposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfed
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Info leak
pixelfed · pixelfedFeb 17, 2023
CVE-2023-0914
21Monitor
Improper Authorization in pixelfed/pixelfed
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
pixelfed · pixelfedFeb 18, 2023