Advisories · Technology
pravel Invoice Generator.
Every CVE that names pravel Invoice Generator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Invoice Generator <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover via 'user_id' Parameter
- pravel Invoice Generator
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter
- pravel Invoice Generator
- CWE-640