flarum
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 16 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 9, 2018 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Flarum < 1.8.16 Session Persistence via Improper Access Token Revocation
Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset
Flarum: Path traversal in LESS parser via theme color settings (incomplete fix for CVE-2023-27577)
Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
Flarum's Logout Route allows open redirects
Server-Side Request Forgery via Avatar upload in flarum
Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files in flarum
Flarum is missing authorization in discussion replies
Missing authorization in Flarum
Post mentions can be used to read any post on the forum without access control
Monitor flarum in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.