Skip to content
OpenAdvisories

Package · Packagist

flarum/framework

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2025-27794

    Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite

    Flarum is open-source forum software. A session hijacking vulnerability exists in versions prior to 1.8.10 when an attacker-controlled authoritative subdomain under a parent domain (e.g., `subdomain.host.com`) sets cookies scoped to the parent domain (`.host.…

    flarum framework flarum/core flarum/framework Packagist
  • Medium 6.5
    CVE-2024-21641

    Flarum's Logout Route allows open redirects

    Flarum is open source discussion platform software. Prior to version 1.8.5, the Flarum `/logout` route includes a redirect parameter that allows any third party to redirect users from a (trusted) domain of the Flarum installation to redirect to any link. For …

    flarum framework flarum/core flarum/framework Packagist
  • Medium 5.3
    CVE-2018-19133

    Flarum Core Leaks PII

    In Flarum Core 0.1.0-beta.7.1, a serious leak can get everyone's email address.

    flarum/framework Packagist