Skip to content
OpenAdvisories

Vendor

idno

3 known vulnerabilities.

Products

idno 2 known 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-28508

    Idno: Unauthenticated SSRF via URL Unfurl Endpoint

    Idno is a social publishing platform. Prior to version 1.6.4, a logic error in the API authentication flow causes the CSRF protection on the URL unfurl service endpoint to be trivially bypassed by any unauthenticated remote attacker. Combined with the absence…

    idno idno idno/known Packagist
  • Critical 9.8
    CVE-2026-26273

    Known affected by Account Takeover via Password Reset Token Leakage

    Known is a social publishing platform. Prior to 1.6.3, a Critical Broken Authentication vulnerability exists in Known 1.6.2 and earlier. The application leaks the password reset token within a hidden HTML input field on the password reset page. This allows an…

    idno known idno/known Packagist