Miniflux vulnerabilities
We track 1 vulnerability in Miniflux products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 17, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Miniflux vulnerabilities
- 7.5 High severity
v2: Exposure of Sensitive Information to an Unauthorized Actor
Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where the `METRICS_COLLECTOR` configuration option is enabled and `METRICS_ALLOWED_NETWORKS` is set to `127.