Approved changes feed: RSS · Atom

cpe:2.3:a:flarum:flarum:0.1.0:beta6:*:*:*:*:*:*

part: a version: 0.1.0 update: beta6

VendorFlarum (f1ff1891-8cc6-5276-8588-ea853cba2c9a)
ProductFlarum (89a4f1da-f4e4-52b0-a015-67a86328986f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/flarum/core purl2cpe 2026-06-01 10:13:24.863197

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-13183 vulnerable 2026-06-08 05:12:41.382222 Details available
Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings.
Published: 2019-07-07T14:34:45.000Z
Updated: 2024-08-04T23:41:10.532Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11514 vulnerable 2026-06-08 05:12:37.492848 Details available
User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.
Published: 2019-04-25T02:59:15.000Z
Updated: 2024-08-04T22:55:40.533Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.