Vulnerabilidades en crater-invoice
10 resultadosAnálisis Vexday
O Crater Invoice apresenta 8 vulnerabilidades conhecidas na base do Vexday, com nenhuma sob ataque ativo ou classificada como crítica, indicando risco moderado. A fraqueza dominante é upload de arquivo sem validação adequada (CWE-434), padrão típico em aplicações web. Nenhuma vulnerabilidade foi publicada nos últimos 90 dias, sugerindo que o panorama de risco é estável.
CVE-2022-1032HIGHInsecure deserialization of not validated module file in crater-invoice/craterEPSS 1.6%CVE-2021-4080HIGHUnrestricted Upload of File with Dangerous Type in crater-invoice/craterEPSS 1.5%CVE-2022-0242HIGHUnrestricted Upload of File with Dangerous Type in crater-invoice/craterEPSS 1.4%CVE-2022-0203HIGHImproper Access Control in crater-invoice/craterEPSS 1.2%CVE-2022-0514MEDIUMBusiness Logic Errors in crater-invoice/craterEPSS 1.0%CVE-2022-1033HIGHUnrestricted Upload of File with Dangerous Type in crater-invoice/craterEPSS 0.9%CVE-2022-0372HIGHCross-site Scripting (XSS) - Stored in crater-invoice/craterEPSS 0.6%CVE-2022-0515MEDIUMCross-Site Request Forgery (CSRF) in crater-invoice/craterEPSS 0.4%CVE-2026-55739HIGHCrater - Missing Tenant-Ownership Check in CustomerPolicy Allows Cross-Company Customer Data Theft and DeletionEPSS 0.3%CVE-2026-71242HIGHCrater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicyEPSS 0.2%