Postiz-app

Gitroomhq Postiz-app: Path Traversal

Arbitrary file read and backend crash through unrestricted provider method calls

GitroomHQ Postiz-app: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Path traversal in post media lets any registered user read server files

Gitroomhq Postiz-app: Code Injection

also in 1 other product

Forged signed tokens let any registered user take over other users and organizations

Gitroomhq Postiz-app: Server-Side Request Forgery (SSRF)

also in 1 other product

Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery

GitroomHQ Postiz-app: Missing Authentication for Critical Function

Postiz has Server-Side Request Forgery via Redirect Bypass in /api/public/stream

also in 1 other product

Postiz stored XSS in public preview page

also in 1 other product

Postiz Has Unrestricted File Upload via MIME Type Spoofing that Leads to Stored XSS

also in 1 other product

Postiz: Unauthenticated arbitrary lifetime PRO grant via Nowpayments webhook

Postiz: SSRF in upload-from-url endpoint allows fetching internal resources and cloud metadata

also in 1 other product

Channel tokens and organization API key exposed in API responses

GitroomHQ Postiz-app: Insufficient Verification of Data Authenticity

Postiz allows header mutation in middleware facilitates resulting in SSRF

Postiz: TOCTOU DNS rebinding bypasses all SSRF URL validation paths

Postiz: SSRF via Webhook Creation Endpoint Missing URL Safety Validation

also in 1 other product

Postiz has an unauthenticated billing-enforcement bypass via /public/modify-subscription