Skip to contentCraterapp Crater vulnerabilities
- craterapp crater/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin...CVE-2023-46865Public exploitEPSS 23.8%7.2 High
- crater-invoice crater-invoice/crater, craterapp crater +1 moreInsecure deserialization of not validated module file in crater-invoice/craterCVE-2022-10327.2 High
- crater-invoice crater-invoice/crater, craterapp crater +1 moreUnrestricted Upload of File with Dangerous Type in crater-invoice/craterCVE-2022-10337.2 High
- crater-invoice crater-invoice/crater, craterapp crater +1 moreCross-Site Request Forgery (CSRF) in crater-invoice/craterCVE-2022-05154.3 Medium
- crater-invoice crater-invoice/crater, craterapp crater +1 moreBusiness Logic Errors in crater-invoice/craterCVE-2022-05146.5 Medium
- crater-invoice crater-invoice/crater, craterapp crater +1 moreCross-site Scripting (XSS) - Stored in crater-invoice/craterCVE-2022-0372Fix available7.6 High
- crater-invoice crater-invoice/crater, craterapp crater +1 moreImproper Access Control in crater-invoice/craterCVE-2022-0203Fix available7.5 High
- crater-invoice crater-invoice/crater, craterapp crater +1 moreUnrestricted Upload of File with Dangerous Type in crater-invoice/craterCVE-2022-0242Fix available7.2 High
- crater-invoice crater-invoice/crater, craterapp crater +1 moreUnrestricted Upload of File with Dangerous Type in crater-invoice/craterCVE-2021-4080Fix available8.8 High