{"id":86445,"date":"2026-02-12T07:15:39","date_gmt":"2026-02-12T07:15:39","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T00:00:00","slug":"cve-2025-31134-information-disclosure-vulnerability-in-freshrss","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-31134-information-disclosure-vulnerability-in-freshrss\/","title":{"rendered":"CVE-2025-31134: Information Disclosure Vulnerability in FreshRSS<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2025-31134 is a severe vulnerability that affects the self-hosted RSS feed aggregator, FreshRSS. The critical flaw allows an attacker to gain additional information about the server, potentially leading to a system compromise or data leakage. This report details the vulnerability, the affected products, and the mitigation guidance.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-31134
\nSeverity: High (7.5 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

FreshRSS | Prior to 1.26.2<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The vulnerability stems from the lack of proper security controls in FreshRSS’s directory structure. An attacker can send specific requests to the server, checking for the existence of certain directories. This information can reveal the presence of older PHP versions or other software installed on the server. Armed with this information, the attacker can plan further attacks based on known vulnerabilities of the identified software.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

An attacker might use a command similar to the following to check for the existence of a directory:<\/p>\n

GET \/path\/to\/directory HTTP\/1.1\nHost: target.example.com<\/code><\/pre>\n
If the server responds with a 200 OK status, the attacker knows the directory exists and can then infer information about the server’s configuration or installed software.<\/p>\n
Mitigation Guidance<\/strong><\/p>\n
FreshRSS has released a patch in version 1.26.2 that addresses this vulnerability. It is highly recommended that users update their software to the latest version. In the event that an immediate update is not possible, users should consider implementing a Web Application Firewall (WAF) or Intrusion Detection System (IDS) as a temporary mitigation measure.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview The CVE-2025-31134 is a severe vulnerability that affects the self-hosted RSS feed aggregator, FreshRSS. The critical flaw allows an attacker to gain additional information about the server, potentially leading to a system compromise or data leakage. This report details the vulnerability, the affected products, and the mitigation guidance. Vulnerability Summary CVE ID: CVE-2025-31134 Severity: […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-86445","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t