Fusionauth
4 known vulnerabilities
Top Products
FusionAuth before 1.41.3 allows a file outside of the application root to be viewed or retrieved using an HTTP request.
FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFro
FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass authentication via a SAML assert
An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> Se
Frequently Asked Questions
How many CVEs affect Fusionauth?
Fusionauth has 4 CVE records in our database, including 1 critical and 2 high severity vulnerabilities.
What are the most severe Fusionauth vulnerabilities?
Fusionauth has 1 critical severity (CVSS 9.0+) and 2 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Fusionauth vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Fusionauth products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Fusionauth Vulnerabilities
CyberStrike scans your infrastructure for Fusionauth vulnerabilities and provides real-time remediation guidance.
Get Started