forem

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

forem records in CISA KEV

No forem vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Forem · all components

TI-2023-11949 CVE-2023-27160 · GHSA-v5g3-mw88-c3jm

HIGH 67

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01157 Published 2023-03-31 No fix listed CWE-918