Vulnerabilities > CVE-2023-27591 - Unspecified vulnerability in Miniflux Project Miniflux

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

miniflux-project

NVD

Published: 2023-03-17

Updated: 2024-11-21

Summary

Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where the `METRICS_COLLECTOR` configuration option is enabled and `METRICS_ALLOWED_NETWORKS` is set to `127.0.0.1/8` (the default). A patch is available in Miniflux 2.0.43. As a workaround, set `METRICS_COLLECTOR` to `false` (default) or run Miniflux behind a trusted reverse-proxy.

Vulnerable Configurations

Part	Description	Count
Application	Miniflux_Project Miniflux Project Miniflux - Miniflux Project Miniflux 1.0.0 Miniflux Project Miniflux 1.0.1 Miniflux Project Miniflux 1.0.2 Miniflux Project Miniflux 1.0.3 Miniflux Project Miniflux 1.0.4 Miniflux Project Miniflux 1.0.5 Miniflux Project Miniflux 1.0.7 Miniflux Project Miniflux 1.0.8 Miniflux Project Miniflux 1.0.9 Miniflux Project Miniflux 1.0.10 Miniflux Project Miniflux 1.0.11 Miniflux Project Miniflux 1.1.0 Miniflux Project Miniflux 1.1.1 Miniflux Project Miniflux 1.1.2 Miniflux Project Miniflux 1.1.3 Miniflux Project Miniflux 1.1.4 Miniflux Project Miniflux 1.1.5 Miniflux Project Miniflux 1.1.6 Miniflux Project Miniflux 1.1.7 Miniflux Project Miniflux 1.1.8 Miniflux Project Miniflux 1.1.9 Miniflux Project Miniflux 1.1.10 Miniflux Project Miniflux 1.2.0 Miniflux Project Miniflux 1.2.1 Miniflux Project Miniflux 1.2.2 Miniflux Project Miniflux 1.2.3 Miniflux Project Miniflux 1.2.4 Miniflux Project Miniflux 2.0.0 Miniflux Project Miniflux 2.0.1 Miniflux Project Miniflux 2.0.2 Miniflux Project Miniflux 2.0.3 Miniflux Project Miniflux 2.0.4 Miniflux Project Miniflux 2.0.5 Miniflux Project Miniflux 2.0.6 Miniflux Project Miniflux 2.0.7 Miniflux Project Miniflux 2.0.8 Miniflux Project Miniflux 2.0.9 Miniflux Project Miniflux 2.0.10 Miniflux Project Miniflux 2.0.11 Miniflux Project Miniflux 2.0.12 Miniflux Project Miniflux 2.0.13 Miniflux Project Miniflux 2.0.14 Miniflux Project Miniflux 2.0.15 Miniflux Project Miniflux 2.0.16 Miniflux Project Miniflux 2.0.17 Miniflux Project Miniflux 2.0.18 Miniflux Project Miniflux 2.0.19 Miniflux Project Miniflux 2.0.20 Miniflux Project Miniflux 2.0.21 Miniflux Project Miniflux 2.0.22 Miniflux Project Miniflux 2.0.23 Miniflux Project Miniflux 2.0.24 Miniflux Project Miniflux 2.0.25 Miniflux Project Miniflux 2.0.26 Miniflux Project Miniflux 2.0.27 Miniflux Project Miniflux 2.0.28 Miniflux Project Miniflux 2.0.29 Miniflux Project Miniflux 2.0.30 Miniflux Project Miniflux 2.0.31 Miniflux Project Miniflux 2.0.32 Miniflux Project Miniflux 2.0.33 Miniflux Project Miniflux 2.0.34 Miniflux Project Miniflux 2.0.35 Miniflux Project Miniflux 2.0.36 Miniflux Project Miniflux 2.0.37 Miniflux Project Miniflux 2.0.38 Miniflux Project Miniflux 2.0.39 Miniflux Project Miniflux 2.0.40 Miniflux Project Miniflux 2.0.41 Miniflux Project Miniflux 2.0.42	72

Summary

Vulnerable Configurations

References