Advisories · Technology

crater-invoice/crater.

Every CVE that names crater-invoice/crater among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-1032 CVE record

CVSS 7.2 High

Insecure deserialization of not validated module file in crater-invoice/crater
- crater-invoice/crater
- Insecure deserialization
Not analysed yet 29 Mar 2022
CVE-2022-1033 CVE record

CVSS 7.2 High

Unrestricted Upload of File with Dangerous Type in crater-invoice/crater
- crater-invoice/crater
- Unrestricted file upload
Not analysed yet 23 Mar 2022
CVE-2022-0515 CVE record

CVSS 4.3 Medium

Cross-Site Request Forgery (CSRF) in crater-invoice/crater
- crater-invoice/crater
- Cross-site request forgery (CSRF)
Not analysed yet 21 Mar 2022
CVE-2022-0514 CVE record

CVSS 6.5 Medium

Business Logic Errors in crater-invoice/crater
- crater-invoice/crater
- CWE-840
Not analysed yet 21 Mar 2022