flarum kayıtları
flarum üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %84,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-862 Missing Authorization2
- CWE-284 Improper Access Control1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-459 Incomplete Cleanup1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
52Planlayın | CVE-2021-32671İstismar yok | XSS vulnerability with translatorflarum · flarum · CWE-79 | Kritik10,0 | — | %39,7 | 7 Haz 2021 |
35İzleyin | CVE-2019-13183İstismar yok | Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings.flarum · flarum · CWE-352 | Yüksek8,8 | — | %0,8 | 7 Tem 2019 |
30İzleyin | CVE-2019-11514İstismar yok | User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.flarum · flarum · CWE-459 | Yüksek7,5 | — | %1,3 | 24 Nis 2019 |
28İzleyin | CVE-2023-40033İstismar yok | Server-Side Request Forgery via Avatar upload in flarumflarum · flarum · CWE-918 | Yüksek7,1 | — | %0,5 | 16 Ağu 2023 |
27İzleyin | CVE-2025-27794İstismar yok | Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwriteflarum · flarum · CWE-74 | Orta6,8 | — | %0,5 | 12 Mar 2025 |
21İzleyin | CVE-2018-19133İstismar yok | In Flarum Core 0.1.0-beta.7.1, a serious leak can get everyone's email address.flarum · flarum · CWE-200 | Orta5,3 | — | %1,2 | 9 Kas 2018 |
21İzleyin | CVE-2021-21283İstismar yok | XSS in Flarum Sticky extension.flarum · sticky · CWE-79 | Orta5,4 | — | %0,8 | 26 Oca 2021 |
21İzleyin | CVE-2022-41938İstismar yok | Cross site scripting vulnerability with discussion titles in flarumflarum · flarum · CWE-79 | Orta5,4 | — | %0,7 | 18 Kas 2022 |
21İzleyin | CVE-2023-22488İstismar yok | Missing authorization in Flarumflarum · flarum · CWE-862 | Orta5,4 | — | %0,4 | 12 Oca 2023 |
19İzleyin | CVE-2023-27577İstismar yok | Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files in flarumflarum · flarum · CWE-22 | Orta4,9 | — | %0,9 | 10 Mar 2023 |
18İzleyin | CVE-2024-21641Kavram kanıtı | Flarum's Logout Route allows open redirectsflarum · flarum · CWE-601 | Orta4,7 | — | %1,1 | 5 Oca 2024 |
17İzleyin | CVE-2023-22487İstismar yok | Post mentions can be used to read any post on the forum without access controlflarum · flarum · CWE-284 | Orta4,3 | — | %0,7 | 11 Oca 2023 |
14İzleyin | CVE-2023-22489İstismar yok | Flarum is missing authorization in discussion repliesflarum · flarum · CWE-862 | Düşük3,5 | — | %0,6 | 13 Oca 2023 |
- CVE-2021-3267152Planlayın
XSS vulnerability with translator
KritikCVSS 10,0İstismar yokEPSS %40flarum · flarum7 Haz 2021
- CVE-2019-1318335İzleyin
Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings.
YüksekCVSS 8,8İstismar yokEPSS %1flarum · flarum7 Tem 2019
- CVE-2019-1151430İzleyin
User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.
YüksekCVSS 7,5İstismar yokEPSS %1flarum · flarum24 Nis 2019
- CVE-2023-4003328İzleyin
Server-Side Request Forgery via Avatar upload in flarum
YüksekCVSS 7,1İstismar yokEPSS %1flarum · flarum16 Ağu 2023
- CVE-2025-2779427İzleyin
Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
OrtaCVSS 6,8İstismar yokEPSS %1flarum · flarum12 Mar 2025
- CVE-2018-1913321İzleyin
In Flarum Core 0.1.0-beta.7.1, a serious leak can get everyone's email address.
OrtaCVSS 5,3İstismar yokEPSS %1flarum · flarum9 Kas 2018
- CVE-2021-2128321İzleyin
XSS in Flarum Sticky extension.
OrtaCVSS 5,4İstismar yokEPSS %1flarum · sticky26 Oca 2021
- CVE-2022-4193821İzleyin
Cross site scripting vulnerability with discussion titles in flarum
OrtaCVSS 5,4İstismar yokEPSS %1flarum · flarum18 Kas 2022
- CVE-2023-2248821İzleyin
Missing authorization in Flarum
OrtaCVSS 5,4İstismar yokEPSS %0flarum · flarum12 Oca 2023
- CVE-2023-2757719İzleyin
Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files in flarum
OrtaCVSS 4,9İstismar yokEPSS %1flarum · flarum10 Mar 2023
- CVE-2024-2164118İzleyin
Flarum's Logout Route allows open redirects
OrtaCVSS 4,7Kavram kanıtıEPSS %1flarum · flarum5 Oca 2024
- CVE-2023-2248717İzleyin
Post mentions can be used to read any post on the forum without access control
OrtaCVSS 4,3İstismar yokEPSS %1flarum · flarum11 Oca 2023
- CVE-2023-2248914İzleyin
Flarum is missing authorization in discussion replies
DüşükCVSS 3,5İstismar yokEPSS %1flarum · flarum13 Oca 2023