Alf Alf vulnerabilities

• alf, alfio-event alf.io +1 more alf.io has an Authenticated RCE via Extension Script Sandbox Escape CVE-2026-35482 8.0 HighJune 2, 2026
• alf, alfio-event alf.io +1 more Bypassing promo code limitations with race conditions CVE-2024-45300 7.5 HighSeptember 6, 2024
• alf, alfio-event alf.io +1 more alf.io's preloaded data as json is not escaped correctly CVE-2024-45299 6.5 MediumSeptember 6, 2024
• alf, alfio-event alf.io +1 more IDOR make user can read e-mail log sent by other events CVE-2024-25634 7.2 HighFebruary 19, 2024
• alf, alfio-event alf.io +1 more IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERS CVE-2024-25635 8.8 HighFebruary 19, 2024
• alf, alfio-event alf.io +1 more Cross-Site Scripting (XSS) via File Upload in Alf.io CVE-2024-25627 3.5 LowFebruary 16, 2024
• alf, alfio-event alf.io +1 more Insufficient Session Expiration in alf.io CVE-2024-25628 7.6 HighFebruary 16, 2024
• alf, alfio-event alfio-event/alf.io +1 more Authorization Bypass Through User-Controlled Key in alfio-event/alf.io CVE-2023-2260 8.8 HighApril 24, 2023
• alf, alfio-event alfio-event/alf.io +1 more Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io CVE-2023-2259 9.1 CriticalApril 24, 2023
• alf, alfio-event alfio-event/alf.io +1 more Improper Neutralization of Formula Elements in a CSV File in alfio-event/alf.io CVE-2023-2258 8.8 HighApril 24, 2023