CVE-2025-27794
2 advisories.
Packagist/flarum/core CVE-2025-27794: medium 6.8, EPSS 0.50%
Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
Action: Upgrade flarum/core to 1.8.10 or later.
composer require flarum/core:1.8.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.10 | - |
Fixed versions
| 1.8.10 |
Sources
- osv: GHSA-hg9j-64wp-m9px
- https://github.com/flarum/framework/security/advisories/GHSA-hg9j-64wp-m9px
- https://nvd.nist.gov/vuln/detail/CVE-2025-27794
- https://github.com/flarum/framework/commit/a05aaea3ee1e0a8b870935183193cd6052f1d402
- https://github.com/flarum/framework
- https://github.com/flarum/framework/releases/tag/v1.8.10
CVE-2025-27794 · published · modified · JSON
Packagist/flarum/framework CVE-2025-27794: medium 6.8, EPSS 0.50%
Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
Action: Upgrade flarum/framework to 1.8.10 or later.
composer require flarum/framework:1.8.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.10 | - |
Fixed versions
| 1.8.10 |
Sources
- osv: GHSA-hg9j-64wp-m9px#Packagist/flarum/framework
- https://github.com/flarum/framework/security/advisories/GHSA-hg9j-64wp-m9px
- https://nvd.nist.gov/vuln/detail/CVE-2025-27794
- https://github.com/flarum/framework/commit/a05aaea3ee1e0a8b870935183193cd6052f1d402
- https://github.com/flarum/framework
- https://github.com/flarum/framework/releases/tag/v1.8.10
CVE-2025-27794 · published · modified · JSON