Executive brief
Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions
Affected products
- Packagist pixelfed/pixelfed
Junglewise Threat Intelligence
CVE-2024-25108: Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions
CVE-2024-25108 · Severity: low · CVSS 3.1 · Published 2024-02-12
Technologies: pixelfed/pixelfed (Packagist). Vendors: Packagist.