Forem

Forem

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.3

CVE-2026-61696

  • EPSS 0.23%
  • Veröffentlicht 18.08.2026 17:57:07
  • Zuletzt bearbeitet 18.08.2026 19:16:59

Forem is open source software for building communities. In versions before commit 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c, a malicious value submitted through feedback_message[message] is stored without sanitization and rendered in app/views/admin/f...

8.2

CVE-2026-48780

  • EPSS 0.22%
  • Veröffentlicht 16.06.2026 14:10:27
  • Zuletzt bearbeitet 16.06.2026 15:46:16

Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously crafted email address could allow an attacker to bypass domain allowlist or denylist restrictions and gain access to invite-only forem deployments. The iss...

7.2

CVE-2023-27160

Exploit
  • EPSS 1.16%
  • Veröffentlicht 31.03.2023 19:15:07
  • Zuletzt bearbeitet 09.07.2026 01:18:12

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.