Fusionauth

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Fusionauth records in CISA KEV

No Fusionauth vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Fusionauth · all components

TI-2020-06313 CVE-2020-7799 · GHSA-5649-2hc3-qv28

MEDIUM 50

An issue was discovered in FusionAuth before 1.11.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.19807 Published 2020-01-28 No fix listed CWE-917

TI-2022-22705 CVE-2022-45921 · GHSA-rmcx-fg5w-x8j9

MEDIUM 40

FusionAuth before 1.41.3 allows a file outside of the application root to be viewed or retrieved using an HTTP request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00736 Published 2022-11-28 Fixed in 1.41.3 CWE-22