CVE-2023-22481

FreshRSS is a self-hosted RSS feed aggregator. When using the greader API, the provided password is logged in clear in `users/_/log_api.txt` in the case where the authentication fails. The issues occurs in `authorizationToUser()` in `greader.php`. If there is an issue with the request or the credentials, `unauthorized()` or `badRequest()` is called. Both these functions are printing the return of `debugInfo()` in the logs. `debugInfo()` will return the content of the request. By default, this will be saved in `users/_/log_api.txt` and if the const `COPY_LOG_TO_SYSLOG` is true, in syslogs as well. Exploiting this issue requires having access to logs produced by FreshRSS. Using the information from the logs, a malicious individual could get users' API keys (would be displayed if the users fills in a bad username) or passwords.

• CWE-532

• https://github.com/FreshRSS/FreshRSS/commit/075cf4c800063e3cc65c3d41a9c23222e8ebb554Patch
• https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-8vvv-jxg6-8578Exploit, Vendor Advisory
• https://github.com/FreshRSS/FreshRSS/commit/075cf4c800063e3cc65c3d41a9c23222e8ebb554Patch
• https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-8vvv-jxg6-8578Exploit, Vendor Advisory

Published

Mar 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22476Mantis Bug Tracker (MantisBT) is an open source issue tracke…4.3
• CVE-2023-22477Mercurius is a GraphQL adapter for Fastify. Any users of Mer…7.5
• CVE-2023-22478KubePi is a modern Kubernetes panel. The API interfaces with…7.5
• CVE-2023-22479KubePi is a modern Kubernetes panel. A session fixation atta…6.5
• CVE-2023-2248Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-22480KubeOperator is an open source Kubernetes distribution focus…9.8
• CVE-2023-22482Argo CD is a declarative, GitOps continuous delivery tool fo…8.8
• CVE-2023-22483cmark-gfm is GitHub's fork of cmark, a CommonMark parsing an…7.5
• CVE-2023-22484cmark-gfm is GitHub's fork of cmark, a CommonMark parsing an…7.5
• CVE-2023-22485cmark-gfm is GitHub's fork of cmark, a CommonMark parsing an…5.3
• CVE-2023-22486cmark-gfm is GitHub's fork of cmark, a CommonMark parsing an…7.5
• CVE-2023-22487Flarum is a forum software for building communities. Using t…4.3