Advisories · Technology
Jorani.
Every CVE that names Jorani among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Jorani before 1.0.4 Missing Authorization and SSRF via Contracts::import()
- Jorani
- Broken access control
- CVSS 5.3 Medium
Jorani before 1.0.4 Missing Authorization in HR Export Actions
- Jorani
- Broken access control
- CVSS 5.3 Medium
Jorani before 1.0.4 Insecure Direct Object Reference in Leave and Overtime Requests
- Jorani
- Broken access control
- CVSS 5.1 Medium
Jorani 1.0.3 Cross-Site Scripting Vulnerability via Language Parameter
- Jorani
- Cross-site scripting (XSS)
- CVSS 8.8 High
SQL Injection on Jorani
- Jorani
- SQL injection