crater-invoice vulnerabilities

10 published CVEs name crater-invoice among the affected products.

Newest CVEs

CVE-2026-71242
Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicy
crater-invoice · crater
High8.2
CVE-2026-55739
Crater - Missing Tenant-Ownership Check in CustomerPolicy Allows Cross-Company Customer Data Theft and Deletion
crater-invoice · Crater
High8.2
CVE-2022-1032
Insecure deserialization of not validated module file in crater-invoice/crater
crater-invoice · crater-invoice/crater
High7.2
CVE-2022-1033
Unrestricted Upload of File with Dangerous Type in crater-invoice/crater
crater-invoice · crater-invoice/crater
High7.2
CVE-2022-0515
Cross-Site Request Forgery (CSRF) in crater-invoice/crater
crater-invoice · crater-invoice/crater
Medium4.3
CVE-2022-0514
Business Logic Errors in crater-invoice/crater
crater-invoice · crater-invoice/crater
Medium6.5
CVE-2022-0372
Cross-site Scripting (XSS) - Stored in crater-invoice/crater
crater-invoice · crater-invoice/crater
High7.6
CVE-2022-0203
Improper Access Control in crater-invoice/crater
crater-invoice · crater-invoice/crater
High7.5
CVE-2022-0242
Unrestricted Upload of File with Dangerous Type in crater-invoice/crater
crater-invoice · crater-invoice/crater
High7.2
CVE-2021-4080
Unrestricted Upload of File with Dangerous Type in crater-invoice/crater
crater-invoice · crater-invoice/crater
High8.8