Unscored CVE-2020-25788 EUVD-2020-18438GHSA-c9pq-99jp-354g

An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles $_REQUEST["u…

Published Sep 19, 2020 · Updated Dec 22, 2025 · Assigned by mitre

Package: tt-rss Package: tt-rss Ecosystem: Debian Ecosystem: Ubuntu

Description

An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles $_REQUEST["url"] in an error message.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 12	tt-rss	21~git20210204.b4cbc79+dfsg-1	—

Ubuntu