Fossbilling vulnerabilities
43 CVEs and advisories name Fossbilling as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-43924FOSSBilling has an open redirect via administrator-configured redirect targets
- CVE-2026-40495FOSSBilling version exposed via asset cache buster
- CVE-2023-4005Insufficient Session Expiration in fossbilling/fossbilling
- CVE-2023-3521Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling
- CVE-2023-3493Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling
- CVE-2023-3491Unrestricted Upload of File with Dangerous Type in fossbilling/fossbilling
- CVE-2023-3490SQL Injection in fossbilling/fossbilling
- CVE-2023-3394Session Fixation in fossbilling/fossbilling
- CVE-2023-3393Code Injection in fossbilling/fossbilling
- CVE-2023-3230Missing Authorization in fossbilling/fossbilling
- CVE-2023-3229Business Logic Errors in fossbilling/fossbilling
- CVE-2023-3228Business Logic Errors in fossbilling/fossbilling
- CVE-2023-3227Insufficient Granularity of Access Control in fossbilling/fossbilling