Craterapp 9 CVEs across 1 Craterapp products. Browse Craterapp vulnerabilities, severities, and proof-of-concept exploits.
Craterapp products with known CVEs Craterapp CVEs — newest first CVE Severity Score Published Summary CVE-2023-46865High 7.22023-10-30 /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an ima… CVE-2022-1032High 7.22022-03-29 Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6. CVE-2022-1033High 7.82022-03-23 Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6. CVE-2022-0515Medium 4.32022-03-21 Cross-Site Request Forgery (CSRF) in GitHub repository crater-invoice/crater prior to 6.0.4. CVE-2022-0514Medium 6.52022-03-21 Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5. CVE-2022-0372Medium 5.42022-01-27 Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2. CVE-2022-0203Medium 5.32022-01-26 Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2. CVE-2022-0242High 7.22022-01-17 Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0. CVE-2021-4080High 8.82022-01-12 crater is vulnerable to Unrestricted Upload of File with Dangerous Type