alf
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 24, 2023 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →alf.io has an Authenticated RCE via Extension Script Sandbox Escape
Bypassing promo code limitations with race conditions
alf.io's preloaded data as json is not escaped correctly
IDOR make user can read e-mail log sent by other events
IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERS
Cross-Site Scripting (XSS) via File Upload in Alf.io
Insufficient Session Expiration in alf.io
Authorization Bypass Through User-Controlled Key in alfio-event/alf.io
Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io
Improper Neutralization of Formula Elements in a CSV File in alfio-event/alf.io
Monitor alf in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.