Browse CVEs

HIGH 7.2 CVE-2023-46865EPSS 20% /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code i… Crater after 6.0.6 Fix from $1,9502023-10-30 HIGH 7.2 CVE-2022-1032 Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6. Crater 6.0.6+ Fix from $1,9502022-03-29 HIGH 7.8 CVE-2022-1033 Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6. Crater 6.0.6+ Fix from $1,9502022-03-23 MEDIUM 6.5 CVE-2022-0514 Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5. Crater 6.0.5+ Fix from $1,6002022-03-21 MEDIUM 5.4 CVE-2022-0372 Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2. Crater 6.0.2+ Fix from $1,6002022-01-27 MEDIUM 5.3 CVE-2022-0203 Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2. Crater 6.0.2+ Fix from $1,6002022-01-26 HIGH 7.2 CVE-2022-0242 Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0. Crater 6.0+ Fix from $1,9502022-01-17 HIGH 8.8 CVE-2021-4080 crater is vulnerable to Unrestricted Upload of File with Dangerous Type Crater 6.0.0+ Fix from $1,9502022-01-12