Debian Freedombox
2 CVEs affecting Debian Freedombox. Latest disclosed: 2025-12-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-25073 | Medium | 5.3 | 2020-09-02 | FreedomBox through 20.13 allows remote attackers to obtain sensitive information from the /server-status page of the Apache HTTP Server, because a connection f… |
CVE-2025-68462 | Low | 3.2 | 2025-12-18 | Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases. |