Forem vulnerabilities

2 known vulnerabilities in Forem from Forem. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  forem: Improper Authentication

  CVE-2026-48780Jun 16, 2026Forem

  Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously crafted email address could allow an attacker to bypass domain allowlist or denylist restrictions and gain access to invite-only forem deployments. The issue is patc

• 7.2 High severity

  Forem: Server-Side Request Forgery

  CVE-2023-27160Mar 31, 2023ForemEPSS 1.16%

  forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.