Bounties
Community
Info
immich-app / immich
Project repository
High performance self-hosted photo and video management solution.
Submit a report
FIRST INTERACTION
WITHIN
3 DAYS
REVIEW
WITHIN
43 DAYS
FIX
WITHIN
5 DAYS
Immich does not enforce a strong password policy
Oct 30th 2022
underfl0w
•
self closed
Horizontal access controls
Feb 8th 2023
juylang
•
self closed
Password Can be set to very weak
Oct 14th 2022
juylang
•
informative
High
Cookie without Secure flag
Sep 22nd 2022
uonghoangminhchau
•
pending
Remote Code Execution (RCE) via Arbitrary File Write and Path Traversal
Sep 21st 2022
vautia
•
High
High
Full Account Takeover via Improper Authorization
Sep 21st 2022
vautia
•
High
High
CRITICAL
$0
HIGH
$0
MEDIUM
$0
LOW
$0