CVE-2020-25787
Critical · 9.8CVSS
9.8
EPSS
18.4%
Published
Sep 19, 2020
CISA due date
—
The record
An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requesting them.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | tt-rss | 0 | 21~git20210204.b4cbc79+dfsg-1 |
| Debian:12 | tt-rss | 0 | 21~git20210204.b4cbc79+dfsg-1 |
| Ubuntu:16.04:LTS | tt-rss | 0 | No fix |
| Ubuntu:18.04:LTS | tt-rss | 0 | No fix |
| Ubuntu:22.04:LTS | tt-rss | 0 | No fix |
| Ubuntu:24.04:LTS | tt-rss | 0 | No fix |
| Ubuntu:24.10 | tt-rss | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | tt-rss | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | tt-rss | 0 | No fix |
Related vulnerabilities
- CVE-2026-63339 IXP Manager is a full-stack web application for managing Internet Exchange Points. CWE-20
- CVE-2026-62958 libriscv is a RISC-V sandbox and emulator. CWE-20
- CVE-2026-119342 Stirling-PDF is a locally hosted web application that facilitates various operations on… CWE-20
- CVE-2026-119339 Tesseract is an open source OCR engine. CWE-20
- CVE-2026-62335 OpenVM is a performant and modular zkVM framework built for customization and… CWE-20
- CVE-2026-62337 SNARK Verifier is a generic (S)NARK verifier. CWE-20
- CVE-2026-62333 OpenVM is a performant and modular zkVM framework built for customization and… CWE-20
- CVE-2026-61618 SNARK Verifier is a generic (S)NARK verifier. CWE-20