CVE-2025-31134 - CVE House
Back to Database
Status published Medium CVE-2025-31134

FreshRSS vulnerable to directory enumeration via ext.php

Vulnerability Description

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, an attacker can gain additional information about the server by checking if certain directories exist. An attacker can, for example, check if older PHP versions are installed or if certain software is installed on the server and potentially use that information to further attack the server. Version 1.26.2 contains a patch for the issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-31134

Credits & Attribution

No credits recorded in the NVD database.

References

More from FreshRSS

View All →
CVE-2025-68932
FreshRSS has weak cryptographic randomness in remember-me token and nonce generation
Low 2.9
CVE-2025-68402
FreshRSS has an authentication bypass due to truncated bcrypt hash [edge branch]
High 8.2
CVE-2025-68148
FreshRSS globally denies access to feed via proxy modifying to 429 Retry-After
Medium 4.3
CVE-2025-62166
FreshRSS has an IDOR which allows for viewing feeds of any user and leaking tokens
High 7.5
CVE-2025-61586
FreshRSS is vulnerable to directory enumeration by setting path in its theme field
Medium 6.9

Affected Vendor

Affected Software

FreshRSS
Vulnerable Versions:
< 1.26.2

Timeline

Official Publish: June 4th, 2025
Last Modified: June 4th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-201

MITRE ATT&CK TTPs

T1041 Exfiltration Over C2 Channel
Exfiltration
T1040 Network Sniffing
Credential Access
T1557 Adversary-in-the-Middle
Collection
T1552 Unsecured Credentials
Credential Access
T1078 Valid Accounts
Persistence