Idno vulnerabilities
We track 3 vulnerabilities in Idno products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 6, 2026.
Latest Idno vulnerabilities
- 8.6 High severity
idno: Server-Side Request Forgery
Idno is a social publishing platform. Prior to version 1.6.4, a logic error in the API authentication flow causes the CSRF protection on the URL unfurl service endpoint to be trivially bypassed by any unauthenticated remote attacker. Combined with the absence
- 7.2 High severity
idno: Improper Neutralization of Special Elements used in an OS Command
Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4.
- 9.8 Critical severity
known: Exposure of Sensitive Information to an Unauthorized Actor
Known is a social publishing platform. Prior to 1.6.3, a Critical Broken Authentication vulnerability exists in Known 1.6.2 and earlier. The application leaks the password reset token within a hidden HTML input field on the password reset page. This allows any