CVE-2022-0515: falha de média gravidade em crater-invoice/crater
Cross-Site Request Forgery (CSRF) in crater-invoice/crater
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.4%
Cross-Site Request Forgery (CSRF) in GitHub repository crater-invoice/crater prior to 6.0.4.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
crater-invoice · crater-invoice/craterCVEs relacionadas — crater-invoice/crater
No mesmo produto, das mais perigosas para as menos.
CVE-2022-1032HIGHInsecure deserialization of not validated module file in crater-invoice/craterEPSS 1.6%CVE-2021-4080HIGHUnrestricted Upload of File with Dangerous Type in crater-invoice/craterEPSS 1.5%CVE-2022-0242HIGHUnrestricted Upload of File with Dangerous Type in crater-invoice/craterEPSS 1.5%CVE-2022-0203HIGHImproper Access Control in crater-invoice/craterEPSS 1.2%CVE-2022-0514MEDIUMBusiness Logic Errors in crater-invoice/craterEPSS 1.0%CVE-2022-1033HIGHUnrestricted Upload of File with Dangerous Type in crater-invoice/craterEPSS 0.9%