fossbilling fossbilling/fossbilling

Name: fossbilling fossbilling/fossbilling
Brand: fossbilling

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

2critical4high5medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-3393US	high7.2	1.03% (64th)	—	0.5.1	2023-06-23	unspecified → 0.5.1
CVE-2023-3490US	critical9.8	0.92% (60th)	—	0.5.3	2023-06-30	unspecified → 0.5.3
CVE-2023-3521US	medium6.1	0.92% (60th)	—	0.5.4	2023-07-06	unspecified → 0.5.4
CVE-2023-3491US	high8.8	0.89% (59th)	—	0.5.3	2023-06-30	unspecified → 0.5.3
CVE-2023-3493US	high8.0	0.53% (44th)	—	0.5.3	2023-06-30	unspecified → 0.5.3
CVE-2023-3229US	medium6.5	0.51% (43rd)	—	0.5.0	2023-06-14	unspecified → 0.5.0
CVE-2023-3394US	medium5.4	0.51% (43rd)	—	0.5.1	2023-06-23	unspecified → 0.5.1
CVE-2023-4005US	critical9.8	0.48% (41st)	—	0.5.5	2023-07-31	unspecified → 0.5.5
CVE-2023-3228US	medium5.7	0.48% (41st)	—	0.5.0	2023-06-14	unspecified → 0.5.0
CVE-2023-3230US	high7.5OT elevated	0.41% (35th)	—	0.5.0	2023-06-14	unspecified → 0.5.0
CVE-2023-3227US	medium5.7	0.41% (35th)	—	0.5.0	2023-06-14	unspecified → 0.5.0

The flaw types (CWEs) most of these CVEs share.

CWE-840CWE-8402 CVEs
CWE-1220Insufficient Granularity of Access Control1 CVEs
CWE-1236Improper Neutralization of Formula Elements in a CSV File1 CVEs
CWE-384Session Fixation1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-613Insufficient Session Expiration1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.