fluxbb vulnerabilities

CVEs whose affected-version data names the fluxbb package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2021-43677Medium· 6.1

4y ago

Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.

▾ Sunlitfluxbb · fluxbbEPSS 0.62%via NVD

CVE-2020-28873High· 7.5

5y ago

Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form

Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on th…

▾ Twilightfluxbb · fluxbbEPSS 0.86%via NVD