Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: FusionDirectory Clear all filters
TI-2025-23841 CVE-2025-32807 · GHSA-chj6-x555-wh22

Path traversal in FusionDirectory

Priority LOW 31

A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png (and .svg or .xpm for some configurations) via the icon parameter of a GET reque…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00639 Published 2025-04-10 Fixed in 1.5 CWE-24
TI-2022-16582 CVE-2022-36180 · GHSA-f585-354r-gp9r

Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via…

Priority HIGH 76

Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /fusiondirectory/index.php?message=[injection], /fusiondirectory/index.php?message=invalidparameter&plug={Injection], /fusiondirectory/index.php?signout…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00937 Published 2022-11-22 No fix listed CWE-79