CyberSecBulletin

Miniflux Project vulnerabilities

We track 1 vulnerability in Miniflux Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 17, 2023.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Miniflux Project vulnerabilities

  • 7.5 High severity

    v2: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2023-27591Miniflux

    Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where the `METRICS_COLLECTOR` configuration option is enabled and `METRICS_ALLOWED_NETWORKS` is set to `127.