Skip to content
OpenAdvisories

Product · fossasia

open-event-server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-63101

    Open Event Server 1.19.1 Unauthenticated Member Roster Export via CSV Export Endpoint

    Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to export the complete member roster of any group, including email addresses, names, join dates, and roles, by submitting requests to the gr…

    fossasia open-event-server