← Vulnerability feed

Vulnerability record · CVE-2022-23497 · published 9 December 2022

CVE-2022-23497: Freshrss information exposure vulnerability

Freshrss · Freshrss

FreshRSS is a free, self-hostable RSS aggregator. User configuration files can be accessed by a remote user. In addition to user preferences, such configurations contain hashed passwords (brypt with cost 9, salted) of FreshRSS Web interface. If the API is used, the configuration might contain a hashed password (brypt with cost 9, salted) of the GReader API, and a hashed password (MD5 salted) of the Fever API. Users should update to version 1.20.2 or edge. Users unable to upgrade can apply the patch manually or delete the file `./FreshRSS/p/ext.php`.

7.5 CVSS 3.1 High EPSS 0.88% · top 42.6% CWE-200 · Information exposure
7.5CVSS 3.1 base score
0.88%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

FreshRSS is a free, self-hostable RSS aggregator. User configuration files can be accessed by a remote user. In addition to user preferences, such configurations contain hashed passwords (brypt with cost 9, salted) of FreshRSS Web interface. If the API is used, the configuration might contain a hashed password (brypt with cost 9, salted) of the GReader API, and a hashed password (MD5 salted) of the Fever API. Users should update to version 1.20.2 or edge. Users unable to upgrade can apply the patch manually or delete the file `./FreshRSS/p/ext.php`.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/FreshRSS/FreshRSS/pull/4928 PatchThird Party Advisory
https://github.com/FreshRSS/FreshRSS/releases/tag/1.20.2 PatchThird Party Advisory
https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-hvrj-5fwj-p7v6 Third Party Advisory
https://github.com/FreshRSS/FreshRSS/pull/4928 PatchThird Party Advisory
https://github.com/FreshRSS/FreshRSS/releases/tag/1.20.2 PatchThird Party Advisory
https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-hvrj-5fwj-p7v6 Third Party Advisory

Track CVE-2022-23497 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-54875Freshrss improper access control vulnerabilityFreshRSS is a free, self-hostable RSS aggregator. In versions 1.16.0 and above through 1.26.3, an unprivileged attacker can create a new admin user w…EPSS 0.53%8.8CVE-2025-54592Freshrss insufficient session expiration vulnerabilityFreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs ou…EPSS 0.53%7.5CVE-2025-62166Freshrss improper access control vulnerabilityFreshRSS is a free, self-hostable RSS aggregator. Prior 1.28.0, a bug in the auth logic related to master authentication tokens, this restriction is …EPSS 0.38%7.5CVE-2025-68148Freshrss allocation without limits vulnerabilityFreshRSS is a free, self-hostable RSS aggregator. From version 1.27.0 to before 1.28.0, An attacker could globally deny access to feeds via proxy mod…EPSS 0.46%7.5CVE-2025-54591Freshrss improper access control vulnerabilityFreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below expose information about feeds and tags of default admin users, due to la…EPSS 0.43%7.4CVE-2025-58173Freshrss improper input validation vulnerabilityFreshRSS is a self-hosted RSS feed aggregator. In versions 1.23.0 through 1.27.0, using a path traversal inside the `language` user configuration par…EPSS 0.70%7.2CVE-2025-54593Freshrss code injection vulnerabilityFreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.1 and below, an authenticated administrator user can execute arbitrary code on the…EPSS 0.78%7.1CVE-2025-46341Freshrss server-side request forgery (ssrf) vulnerabilityFreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, when the server is using HTTP auth via reverse proxy, it's possible to impers…EPSS 0.46%

Source: NIST National Vulnerability Database (record CVE-2022-23497), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.