TI-2020-06313 CVE-2020-7799 · GHSA-5649-2hc3-qv28
An issue was discovered in FusionAuth before 1.11.0.
Priority MEDIUM 50
An issue was discovered in FusionAuth before 1.11.0.
Fusionauth
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Fusionauth records in CISA KEVNo Fusionauth vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2020-10080 CVE-2020-12676 · GHSA-qh45-328h-49g4
FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass…
Priority MEDIUM 45
FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack".
TI-2022-22705 CVE-2022-45921 · GHSA-rmcx-fg5w-x8j9
FusionAuth before 1.41.3 allows a file outside of the application root to be viewed or…
Priority MEDIUM 40
FusionAuth before 1.41.3 allows a file outside of the application root to be viewed or retrieved using an HTTP request.
TI-2021-09145 CVE-2021-27736 · GHSA-3jw3-99x8-h6xc
FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or…
Priority LOW 32
FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFromBytes uses javax.xml.parsers.DocumentBuilderFactory unsafely.