Friendica

9 CVEs across 1 Friendica products. Browse Friendica vulnerabilities, severities, and proof-of-concept exploits.

Friendica products with known CVEs

ProductCVEs
Friendica9
Friendica CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-72597Medium6.52026-08-11A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe…
CVE-2026-72550Critical9.82026-08-11An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthenticated remote attackers to execute arbitrary SQL statements via the…
CVE-2024-39094Medium5.42024-08-20Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the homepage, xmpp, and matrix parameters.
CVE-2024-27731Medium6.12024-08-15Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the f…
CVE-2024-27730Critical9.82024-08-15Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the cid param…
CVE-2024-27729Medium6.12024-08-15Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the location parameter of the calendar e…
CVE-2024-27728Medium6.12024-08-15Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug fe…
CVE-2024-26495Medium6.12024-04-03Cross Site Scripting (XSS) vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive informa…
CVE-2021-30141High7.52021-04-05Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to…