Flarum
13 known vulnerabilities
Top Products
Flarum is open-source forum software. A session hijacking vulnerability exists in versions prior to 1.8.10 when an attac
Flarum is open source discussion platform software. Prior to version 1.8.5, the Flarum `/logout` route includes a redire
Flarum is an open source forum software. Flarum is affected by a vulnerability that allows an attacker to conduct a Blin
flarum is a forum software package for building communities. In versions prior to 1.7.0 an admin account which has alrea
Flarum is a discussion platform for websites. If the first post of a discussion is permanently deleted but the discussio
Flarum is a forum software for building communities. Using the notifications feature, one can read restricted/private co
Flarum is a forum software for building communities. Using the mentions feature provided by the flarum/mentions extensio
Flarum is an open source discussion platform. Flarum's page title system allowed for page titles to be converted into HT
Flarum is a forum software for building communities. Flarum's translation system allowed for string inputs to be convert
Flarum is an open source discussion platform for websites. The "Flarum Sticky" extension versions 0.1.0-beta.14 and 0.1.
Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings.
User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.
In Flarum Core 0.1.0-beta.7.1, a serious leak can get everyone's email address.
Frequently Asked Questions
How many CVEs affect Flarum?
Flarum has 13 CVE records in our database, including 2 critical and 4 high severity vulnerabilities.
What are the most severe Flarum vulnerabilities?
Flarum has 2 critical severity (CVSS 9.0+) and 4 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Flarum vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Flarum products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Flarum Vulnerabilities
CyberStrike scans your infrastructure for Flarum vulnerabilities and provides real-time remediation guidance.
Get Started