GCVE - cpe:2.3:a:fusiondirectory:fusiondirectory:1.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fusiondirectory:fusiondirectory:1.3:*:*:*:*:*:*:*

part: a version: 1.3 update: *

Vendor	Fusiondirectory (`3d8ab1c6-e015-5cfa-83a6-6d7631669f75`)
Product	Fusiondirectory (`df6f79eb-15b5-5c87-98cc-445e51ede158`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:deb/debian/fusiondirectory`	purl2cpe	2026-06-01 10:15:00.657559
`pkg:deb/ubuntu/fusiondirectory`	purl2cpe	2026-06-01 10:15:00.657562
`pkg:github/fusiondirectory/fusiondirectory`	purl2cpe	2026-06-01 10:15:00.657565
`pkg:rpm/opensuse/fusiondirectory`	purl2cpe	2026-06-01 10:15:00.657568

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-36180`	vulnerable	2026-06-08 05:46:06.427758	Details available Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /fusiondirectory/index.php?message=[injection], /fusiondirectory/index.php?message=invalidparameter&plug={Injection], /fusiondirectory/index.php?signout=1&message=[injection]&plug=106. Published: 2022-11-22T00:00:00.000Z Updated: 2026-07-09T00:20:11.717Z Open on db.gcve.eu Reference links https://yoroi.company/research/cve-advisory-full-disclosure-multiple-vulnerabilities/ https://lists.debian.org/debian-lts-announce/2023/07/msg00009.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36179`	vulnerable	2026-06-08 05:46:06.427143	Details available Fusiondirectory 1.3 suffers from Improper Session Handling. Published: 2022-11-22T00:00:00.000Z Updated: 2026-07-09T00:20:10.490Z Open on db.gcve.eu Reference links https://yoroi.company/research/cve-advisory-full-disclosure-multiple-vulnerabilities/ https://lists.debian.org/debian-lts-announce/2023/07/msg00009.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.