Craterapp vulnerabilities

Products

• Crater 9

Newest

• craterapp crater /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin... CVE-2023-46865 Public exploit EPSS 23.8% 7.2 HighOctober 30, 2023
• crater-invoice crater-invoice/crater, craterapp crater +1 more Insecure deserialization of not validated module file in crater-invoice/crater CVE-2022-1032 7.2 HighMarch 29, 2022
• crater-invoice crater-invoice/crater, craterapp crater +1 more Unrestricted Upload of File with Dangerous Type in crater-invoice/crater CVE-2022-1033 7.2 HighMarch 23, 2022
• crater-invoice crater-invoice/crater, craterapp crater +1 more Cross-Site Request Forgery (CSRF) in crater-invoice/crater CVE-2022-0515 4.3 MediumMarch 21, 2022
• crater-invoice crater-invoice/crater, craterapp crater +1 more Business Logic Errors in crater-invoice/crater CVE-2022-0514 6.5 MediumMarch 21, 2022
• crater-invoice crater-invoice/crater, craterapp crater +1 more Cross-site Scripting (XSS) - Stored in crater-invoice/crater CVE-2022-0372 Fix available 7.6 HighJanuary 27, 2022
• crater-invoice crater-invoice/crater, craterapp crater +1 more Improper Access Control in crater-invoice/crater CVE-2022-0203 Fix available 7.5 HighJanuary 26, 2022
• crater-invoice crater-invoice/crater, craterapp crater +1 more Unrestricted Upload of File with Dangerous Type in crater-invoice/crater CVE-2022-0242 Fix available 7.2 HighJanuary 17, 2022
• crater-invoice crater-invoice/crater, craterapp crater +1 more Unrestricted Upload of File with Dangerous Type in crater-invoice/crater CVE-2021-4080 Fix available 8.8 HighJanuary 12, 2022