repository icon
alfio-event / alf.io Project repository

alf.io - The open source ticket reservation system for conferences, trade shows, workshops, meetups

Submit a report

FIRST INTERACTION

WITHIN2 DAYS

REVIEW

WITHIN4 DAYS

FIX

WITHIN40 DAYS

IDOR Vulnerability Allow the owner of one Organization can create, edit, delete...
lujiefsi
High
•CVE-2023-2260
IDOR Vulnerability Allow the owner of one Organization can edit, delete and rese...
lujiefsi
High
IDOR Vulnerability Allow the owner of one Organization can disable users that be...
lujiefsi
High
IDOR Vulnerability Allow the owner of one Organization can update anyother orga...
lujiefsi
High
CSV Injection in CSV files generated by the backend
lujiefsi
High
•CVE-2023-2258
Server Side Template Injection
yelprofessor
Critical
•CVE-2023-2259
CWE-425: Direct Request ('Forced Browsing')
lujiefsi
self closed
XSS in Markdown Events
rezaduty
Medium
•CVE-2023-0301
Html Injection in Groups
rezaduty
Low
•CVE-2023-0300
CSRF in insert text
rezaduty
not applicable