alfio-event alf.io

• CVE-2026-50165 High 7.1 alf.io has Improper Access Control for Organization Owners that Exposes System Secrets 0.4%
• CVE-2026-41412 Medium 4.9 alf.io vulnerable to Arbitrary File Read and Exfil via simpleHttpClient Extension Script 0.3%
• CVE-2026-35482 High 8.0 alf.io has an Authenticated RCE via Extension Script Sandbox Escape 0.3%
• CVE-2024-45300 High 7.5 Bypassing promo code limitations with race conditions 0.4%
• CVE-2024-45299 Medium 6.5 alf.io's preloaded data as json is not escaped correctly 0.7%
• CVE-2024-25634 High 7.2 IDOR make user can read e-mail log sent by other events 0.7%
• CVE-2024-25635 High 8.8 IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERS 0.7%
• CVE-2024-25627 Low 3.5 Cross-Site Scripting (XSS) via File Upload in Alf.io 0.4%
• CVE-2024-25628 High 7.6 Insufficient Session Expiration in alf.io 0.4%