Alf

10 CVEs across 1 Alf products. Browse Alf vulnerabilities, severities, and proof-of-concept exploits.

Alf products with known CVEs

ProductCVEs
Alf10
Alf CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-35482High8.02026-06-02alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5-2606, a sandbox escape vulnera…
CVE-2024-45300High7.52024-09-06alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the u…
CVE-2024-45299Medium6.52024-09-06alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, the preloaded data as json is…
CVE-2024-25635High8.82024-02-19alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, organization owners can view the generated API KEY and USERS of other organiz…
CVE-2024-25634High7.22024-02-19alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, an attacker can access data from other organizers. The attacker can use a spe…
CVE-2024-25628High7.62024-02-16Alf.io is a free and open source event attendance management system. In versions prior to 2.0-M4-2402 users can access the admin area even after being invalida…
CVE-2024-25627Low3.52024-02-16Alf.io is a free and open source event attendance management system. An administrator on the alf.io application is able to upload HTML files that trigger JavaS…
CVE-2023-2260High8.82023-04-24Authorization Bypass Through User-Controlled Key in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
CVE-2023-2259High7.22023-04-24Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
CVE-2023-2258High8.82023-04-24Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.