CVE-2022-31110 MEDIUM

CVE-2022-31110: Denial of Service (DoS) vulnerability in RSSHub

Vendor Diygod
Product RSSHub
Weakness CWE-400
Published June 29, 2022
Last update April 22, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

RSSHub is an open source, extensible RSS feed generator. In commits prior to 5c4177441417 passing some special values to the `filter` and `filterout` parameters can cause an abnormally high CPU. This results in an impact on the performance of the servers and RSSHub services which may lead to a denial of service. This issue has been fixed in commit 5c4177441417 and all users are advised to upgrade. There are no known workarounds for this issue.

Key dates

02Disclosure timeline

June 29, 2022 CVE published
April 22, 2025 Record updated