Read the docs

FusionDirectory

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

FusionDirectory records in CISA KEV

No FusionDirectory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fusiondirectory 2 records HIGH

Records

3 records

TI-2022-16582 CVE-2022-36180 · GHSA-f585-354r-gp9r

Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via…

Priority HIGH 76

Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /fusiondirectory/index.php?message=[injection], /fusiondirectory/index.php?message=invalidparameter&plug={Injection], /fusiondirectory/index.php?signout…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00937 Published 2022-11-22 No fix listed CWE-79
TI-2025-23841 CVE-2025-32807 · GHSA-chj6-x555-wh22

Path traversal in FusionDirectory

Priority LOW 31

A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png (and .svg or .xpm for some configurations) via the icon parameter of a GET reque…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00639 Published 2025-04-10 Fixed in 1.5 CWE-24
Open these records in search →