CVE-2025-43856: OAuth2 Account Hijacking Flaw Found in Immich, a Popular Self-Hosted Photo Platform

July 15, 2025

CVE-2025-43856: OAuth2 Account Hijacking Flaw Found in Immich, a Popular Self-Hosted Photo Platform

A critical vulnerability has been disclosed in Immich, a rapidly growing open-source project for self-hosted photo and video management, with over 70,000 stars on GitHub. Tracked as CVE-2025-43856 and …

Published Date:
Jul 15, 2025 (16 hours, 21 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-53833

CVE-2025-43856

CVE-2024-9014

Source: Read More

Previous ArticleHazyBeacon: Novel Backdoor Uses AWS Lambda for Stealthy C2, Targets Govts

Next Article Preventing Zero-Click AI Threats: Insights from EchoLeak

Report: 71% of tech leaders won’t hire devs without AI skills

Slack’s AI search now works across an organization’s entire knowledge base

In-House vs Outsourcing for React.js Development: Understand What Is Best for Your Enterprise

Tiny Screens, Big Impact: The Forgotten Art Of Developing Web Apps For Feature Phones

Too many open browser tabs? This is still my favorite solution – and has been for years

This new browser won’t monetize your every move – how to try it

Pokémon has partnered with one of the biggest PC gaming brands again, and you can actually buy these accessories — but do you even want to?

AMD’s budget Ryzen AI 5 330 processor will introduce a wave of ultra-affordable Copilot+ PCs with its mobile 50 TOPS NPU

The details of TC39’s last meeting

The details of TC39’s last meeting

Notes Android App Using SQLite

How to Get Security Patches for Legacy Unsupported Node.js Versions

KeySmith – SSH key management

KeySmith – SSH key management

Pokémon has partnered with one of the biggest PC gaming brands again, and you can actually buy these accessories — but do you even want to?

AMD’s budget Ryzen AI 5 330 processor will introduce a wave of ultra-affordable Copilot+ PCs with its mobile 50 TOPS NPU

CVE-2025-43856: OAuth2 Account Hijacking Flaw Found in Immich, a Popular Self-Hosted Photo Platform

CVE-2025-43856: OAuth2 Account Hijacking Flaw Found in Immich, a Popular Self-Hosted Photo Platform

Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises

Enable ESM in Ubuntu 20.04 LTS to Continue Getting Updates

20+ Best Resume Templates for Microsoft Word in 2025

How climate tech startups are building foundation models with Amazon SageMaker HyperPod

Microsoft continues Xbox layoffs, with jobs cut at King and ZeniMax Media — read Phil Spencer’s note to staff

North Korean Hackers Exploit GitHub and Dropbox in Targeted Spearphishing Attacks

CVE-2024-12718 – Python Tarfile Filter File Metadata and Permission Modification Vulnerability

OneDrive for Mac will soon give you more flexible storage options

Model Context Protocol (MCP) vs Function Calling: A Deep Dive into AI Integration Architectures

CVE-2025-43856: OAuth2 Account Hijacking Flaw Found in Immich, a Popular Self-Hosted Photo Platform

CVE-2025-43856: OAuth2 Account Hijacking Flaw Found in Immich, a Popular Self-Hosted Photo Platform

Related Posts