solidtime-io vulnerabilities
4 published CVEs name solidtime-io among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-76806
Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle
solidtime-io · solidtime
Medium6.3 - CVE-2026-47236
Solidtime team page exposes pending invitation and member emails to employees who lack invitations:view/members:view permission
solidtime-io · solidtime
Medium4.3 - CVE-2026-42279
solidtime: Time entry update endpoint allows cross-organization modification of a known time-entry UUID
solidtime-io · solidtime
Medium5.8 - CVE-2026-33345
solidtime vulnerable to IDOR in private projects
solidtime-io · solidtime
Medium6.5