flarum/framework
Delightfully simple forum software.
Security Advisories for flarum/framework in packagist
Moderate
over 1 year ago
Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
packagist
flarum/framework, flarum/core
Moderate
over 2 years ago
Flarum's logout Route allows open redirects
packagist
flarum/framework, flarum/core
High
almost 3 years ago
Flarum vulnerable to LFI and Blind SSRF via Avatar upload
packagist
flarum/framework, flarum/core
Potential
Moderate
over 3 years ago
Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files
packagist
flarum/core
Potential
Low
over 3 years ago
Any Flarum user including unactivated can reply in public discussions whose first post was permanently deleted
packagist
flarum/core
Potential
Potential
High
over 3 years ago
Flarum post mentions can be used to read any post on the forum without access control
packagist
flarum/mentions
Potential
Critical
over 3 years ago
Cross site scripting vulnerability with discussion titles
packagist
flarum/core