Pretty Mail by FriendsOfFlarum 安全漏洞

Pretty Mail by FriendsOfFlarum is an open source tool from Friends of Flarum that allows you to make custom html templates for emails. A security vulnerability exists in Pretty Mail by FriendsOfFlarum version 1.1.2, which stems from a server-side template injection in an email template that could...

Flarum 访问控制错误漏洞

Flarum is an open source forum system for the Flarum community. An access control error vulnerability exists in flarum mention versions prior to 1.6.3, which stems from allowing the disclosure of all posts in the forum database, including posts awaiting approval, posts in tags to which the user...