inventree vulnerabilities (PyPI)

7 vulnerabilities.

• inventree PyPI Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP GHSA-vx3h-qwqw-r2wq Fix available 5.3 MediumOctober 2, 2024
• inventree PyPI Cross-site Scripting (XSS) - Stored in inventree/inventree CVE-2022-3355 Fix available 8.2 HighSeptember 29, 2022
• inventree PyPI XSS Vulnerability in Markdown Editor GHSA-85q9-7467-r53q Fix available No scoreJune 17, 2022
• inventree PyPI Improper Neutralization of Formula Elements in a CSV File in inventree/inventree CVE-2022-2112 Fix available 9.0 CriticalJune 17, 2022
• inventree PyPI Formula Injection in Exported Data GHSA-7rq4-qcpw-74gq Fix available No scoreJune 17, 2022
• inventree PyPI Unrestricted Upload of File with Dangerous Type in inventree/inventree CVE-2022-2111 Fix available 9.0 CriticalJune 17, 2022
• inventree PyPI Insufficient HTML Sanitization GHSA-rm89-9g65-4ffr Fix available No scoreJune 17, 2022