Skip to content
OpenAdvisories

Vendor

Monero Project

1 known vulnerabilities.

Products

Forum 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-34060

    Monero Forum Remote Code Execution via Arbitrary File Read and Cookie Forgery

    A PHP objection injection vulnerability exists in the Monero Project’s Laravel-based forum software due to unsafe handling of untrusted input in the /get/image/ endpoint. The application passes a user-supplied link parameter directly to file_get_contents() wi…

    Monero Project Forum