Skip to content
OpenAdvisories

Vendor

opensource-socialnetwork

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3

    Open Source Social Network (OSSN) through 10.1 Missing Authorization via Album Photo Routes

    Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler that allows unauthenticated attackers to download files via album/getphoto and album/getcover. Attackers can enumerate sequential file GUI…

  • Medium 6.5

    Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route

    Open Source Social Network (OSSN) through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossn_com.php that allows authenticated users to read other users' private message attachments. Attackers can request the /mess…