CVE-2025-59949

FreshRSS, a free self-hostable RSS aggregator, contains a vulnerability in development versions (from 57e1a37 to 00f2f04) where the nonce length was changed from 40 to 64 characters. password_verify() is called with a constructed string (SHA-256 nonce + part of a bcrypt hash) instead of the raw user password. Due to bcrypt's 72-byte input truncation, password verification may succeed even when the user enters an incorrect password.

FreshRSS prior to version 1.28.0 uses cryptographically weak random number generators (mt_rand() and uniqid()) to generate remember-me authentication tokens and challenge-response nonces. This allows attackers to predict valid session tokens, leading to account takeover through persistent session hijacking.

FreshRSS is a free, self-hostable RSS aggregator. From version 1.27.0 to before 1.28.0, an attacker could globally deny access to feeds via proxy modifying to 429 Retry-After for a large list of feeds on a given instance, making it unusable for the majority of users. This issue has been patched in version 1.28.0.