CVE-2020-25789

State: Published
Severity: Not scored
Published: Sep 19, 2020
Updated: Dec 22, 2025
Reserved: Sep 19, 2020

Description

An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript inside an SVG document.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://community.tt-rss.org/t/heads-up-several-vulnerabilities-fixed/3799
https://git.tt-rss.org/fox/tt-rss/commit/da5af2fae091041cca27b24b6f0e69e4a6d0dc60
https://blog.neagaru.com/p/exploiting-tiny-tiny-rss-2020

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.