CVE-2022-23497 - CVE House

Back to Database

Status published Medium CVE-2022-23497

Insecure file access in FreshRSS

6.5 CVSS

Vulnerability Description

FreshRSS is a free, self-hostable RSS aggregator. User configuration files can be accessed by a remote user. In addition to user preferences, such configurations contain hashed passwords (brypt with cost 9, salted) of FreshRSS Web interface. If the API is used, the configuration might contain a hashed password (brypt with cost 9, salted) of the GReader API, and a hashed password (MD5 salted) of the Fever API. Users should update to version 1.20.2 or edge. Users unable to upgrade can apply the patch manually or delete the file `./FreshRSS/p/ext.php`.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-23497

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from FreshRSS

View All →

FreshRSS has weak cryptographic randomness in remember-me token and nonce generation

FreshRSS has an authentication bypass due to truncated bcrypt hash [edge branch]

FreshRSS globally denies access to feed via proxy modifying to 429 Retry-After

FreshRSS has an IDOR which allows for viewing feeds of any user and leaking tokens

FreshRSS is vulnerable to directory enumeration by setting path in its theme field

Affected Vendor

FreshRSS

View all reports →

Affected Software

FreshRSS

Vulnerable Versions:

>= 1.18.0, < 1.20.2

Timeline

Official Publish: December 9th, 2022

Last Modified: April 23rd, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1213 Data from Information Repositories

T1005 Data from Local System

T1552 Unsecured Credentials

Credential Access

T1041 Exfiltration Over C2 Channel