Skip to content
OpenAdvisories

Vendor

fossasia

4 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Open Event Server 1.19.1 Unauthenticated Member Roster Export via CSV Export Endpoint

    Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to export the complete member roster of any group, including email addresses, names, join dates, and roles, by submitting requests to the gr…

  • High 8.6

    Directory Traversal Vulnerability in SUSI.AI Server

    SUSI.AI is an intelligent Open Source personal assistant. SUSI.AI Server before version d27ed0f has a directory traversal vulnerability due to insufficient input validation. Any admin config and file readable by the app can be retrieved by the attacker. Furth…