Skip to content
Alfio-event vulnerabilities
Newest
-
alfio-event alf.io
alf.io has Improper Access Control for Organization Owners that Exposes System Secrets
CVE-2026-50165
7.1 High
-
alfio-event alf.io
alf.io vulnerable to Arbitrary File Read and Exfil via simpleHttpClient Extension Script
CVE-2026-41412
4.9 Medium
-
alf, alfio-event alf.io +1 more
alf.io has an Authenticated RCE via Extension Script Sandbox Escape
CVE-2026-35482
8.0 High
-
alf, alfio-event alf.io +1 more
Bypassing promo code limitations with race conditions
CVE-2024-45300
7.5 High
-
alf, alfio-event alf.io +1 more
alf.io's preloaded data as json is not escaped correctly
CVE-2024-45299
6.5 Medium
-
alf, alfio-event alf.io +1 more
IDOR make user can read e-mail log sent by other events
CVE-2024-25634
7.2 High
-
alf, alfio-event alf.io +1 more
IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERS
CVE-2024-25635
8.8 High
-
alf, alfio-event alf.io +1 more
Cross-Site Scripting (XSS) via File Upload in Alf.io
CVE-2024-25627
3.5 Low
-
alf, alfio-event alf.io +1 more
Insufficient Session Expiration in alf.io
CVE-2024-25628
7.6 High
-
alf, alfio-event alfio-event/alf.io +1 more
Authorization Bypass Through User-Controlled Key in alfio-event/alf.io
CVE-2023-2260
8.8 High
-
alf, alfio-event alfio-event/alf.io +1 more
Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io
CVE-2023-2259
9.1 Critical
-
alf, alfio-event alfio-event/alf.io +1 more
Improper Neutralization of Formula Elements in a CSV File in alfio-event/alf.io
CVE-2023-2258
8.8 High
-
alfio-event alfio-event/alf.io, opencollective alf.io +1 more
Cross-site Scripting (XSS) - Stored in alfio-event/alf.io
CVE-2023-0301
4.3 Medium
-
alfio-event alfio-event/alf.io, opencollective alf.io +1 more
Cross-site Scripting (XSS) - Reflected in alfio-event/alf.io
CVE-2023-0300
3.5 Low