Skip to content
OpenAdvisories

Vendor

Hubzilla

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.3

    Hubzilla version prior to 11.4 CSRF via OAuth2 /authorize Endpoint App Registration

    Hubzilla versions prior to 11.4 contains a cross-site request forgery vulnerability in the OAuth2 /authorize endpoint handled by Zotlabs\Module\Authorize::post() that allows unauthenticated attackers to register arbitrary OAuth2 applications under an authenti…