Advisories · Technology
crater.
Every CVE that names crater among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint
- crater
- Path traversal
- CVSS 8.2 High
Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicy
- crater
- Broken access control
- CVSS 8.2 High
Crater - Missing Tenant-Ownership Check in CustomerPolicy Allows Cross-Company Customer Data Theft and Deletion
- Crater
- Broken access control
- CVSS 5.1 Medium
crater-invoice-inc crater Invoice Note InvoicesRequest.php getFormattedString cross site scripting
- crater
- Cross-site scripting (XSS)
- Code injection