Approved changes feed: RSS · Atom
cpe:2.3:a:forem:forem:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Forem (338a5ff7-7e92-5eef-9401-e1941a5fd5ec) |
|---|---|
| Product | Forem (c49f8b64-1a25-52ff-be59-d3997691f1a0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/forem/forem |
purl2cpe | 2026-06-01 10:10:59.921353 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-48780 |
vulnerable | 2026-07-29 00:55:01.635122 |
Forem vulnerable to bypass of email address domain restrictions
HIGH (8.2)
Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously crafted email address could allow an attacker to bypass domain allowlist or denylist restrictions and gain access to invite-only forem deployments. The issue is patched as of `a2ab6d4`. As a workaround, some SMTP servers and email delivery providers may drop or refuse to send maliciously crafted email addresses.
Published: 2026-06-16T14:10:27.047Z
Updated: 2026-06-17T13:49:28.484Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27160 |
vulnerable | 2026-06-08 05:57:40.686198 |
Details available
forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.
Published: 2023-03-31T00:00:00.000Z
Updated: 2026-07-09T00:24:29.185Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.