Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 12
Reset filtersFlarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
Flarum's logout Route allows open redirects
Flarum vulnerable to LFI and Blind SSRF via Avatar upload
Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files
Any Flarum user including unactivated can reply in public discussions whose first post was permanently deleted
Flarum notifications can leak restricted content
Flarum post mentions can be used to read any post on the forum without access control
Cross site scripting vulnerability with discussion titles
XSS vulnerability with translator
XSS in Flarum Sticky extension
Users can edit the tags of any discussion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.