FAIL › dossier
bloofox
VENDOR· dossier confidence 50%
Bloofox is a digital identity software vendor with a documented history of releasing software containing critical vulnerabilities, including SQL injection and arbitrary file deletion flaws, indicating a need for rigorous security review before DIB adoption.
PROFILE
Categorysoftware vendorWhat they doBloofox is a software vendor that provides digital identity and authentication solutions.
SECURITY POSTURE
Bloofox has a poor security posture, evidenced by multiple critical vulnerabilities in its software releases that were exploited or disclosed within months of release.
Notable failures
- CVE-2023-34752: SQL injection via admin settings page
- CVE-2023-27812: Arbitrary file deletion via delete_file() function
Patterns: critical vulnerabilities in core application functions; lack of timely patching for high-severity flaws
FAILURE HISTORY · 2
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2023-06-14 | CVE-2023-34752 | critical | bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit. |
| 2023-04-13 | CVE-2023-27812 | critical | bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the delete_file() function. |
Open questions: What is Bloofox's current patching SLA? · Has Bloofox implemented any security governance improvements since 2023?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-21 04:50:46.881928+00:00