RSSHub is an open source, extensible RSS feed generator. In commits prior to 5c4177441417 passing some special values to the `filter` and `filterout` parameters can cause an abnormally high CPU. This results in an impact on the performance of the servers and RSSHub services which may lead to a denial of service. This issue has been fixed in commit 5c4177441417 and all users are advised to upgrade. There are no known workarounds for this issue.
References
Link | Resource |
---|---|
https://github.com/DIYgod/RSSHub/commit/5c4177441417b44a6e45c3c63e9eac2504abeb5b | Patch Third Party Advisory |
https://github.com/DIYgod/RSSHub/issues/10045 | Exploit Issue Tracking Mitigation Third Party Advisory |
https://github.com/DIYgod/RSSHub/security/advisories/GHSA-jvxx-v45p-v5vf | Patch Third Party Advisory |
https://github.com/DIYgod/RSSHub/commit/5c4177441417b44a6e45c3c63e9eac2504abeb5b | Patch Third Party Advisory |
https://github.com/DIYgod/RSSHub/issues/10045 | Exploit Issue Tracking Mitigation Third Party Advisory |
https://github.com/DIYgod/RSSHub/security/advisories/GHSA-jvxx-v45p-v5vf | Patch Third Party Advisory |
Configurations
History
21 Nov 2024, 07:03
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 5.3 |
References | () https://github.com/DIYgod/RSSHub/commit/5c4177441417b44a6e45c3c63e9eac2504abeb5b - Patch, Third Party Advisory | |
References | () https://github.com/DIYgod/RSSHub/issues/10045 - Exploit, Issue Tracking, Mitigation, Third Party Advisory | |
References | () https://github.com/DIYgod/RSSHub/security/advisories/GHSA-jvxx-v45p-v5vf - Patch, Third Party Advisory |
24 Jul 2023, 13:17
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-1333 |
Information
Published : 2022-06-29 18:15
Updated : 2024-11-21 07:03
NVD link : CVE-2022-31110
Mitre link : CVE-2022-31110
CVE.ORG link : CVE-2022-31110
JSON object : View
Products Affected
rsshub
- rsshub