Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
forem records in CISA KEVNo forem vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 67
forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01157 · Published 2023-03-31 · No fix listed CWE-918
Priority MEDIUM 41
Forem is open source software for building communities.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00218 · Published 2026-06-16 · No fix listed CWE-287
Priority LOW 28
Forem is open source software for building communities.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00322 · Published 2026-08-18 · Fixed in 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c CWE-116
