Vulnerability index

Browse CVEs

4 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2022-45921 FusionAuth before 1.41.3 allows a file outside of the application root to be viewed or retrieved using an HTTP request. To be specific, an attacker m… Fusionauth 1.41.3+ Fix from $1,9502022-11-28 MEDIUM 6.5 CVE-2021-27736 FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFromBytes uses javax.xml.parsers… Saml V2 0.5.4+ Fix from $1,6002021-04-22 CRITICAL 9.1 CVE-2020-12676 FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature el… Samlv2 No fix yet Fix from $2,3002020-10-02 HIGH 7.2 CVE-2020-7799EPSS 20% An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> Settings -> Email Templates) or… Fusionauth 1.11.0+ Fix from $1,9502020-01-28