Login Request a demo
CR
Product
Crater
by Craterapp · last CVE Oct 30, 2023
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 5Medium 4Low 0
Severity
All severities9Critical0High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Crater to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-4080
8.8
1%
Jan 12
crater is vulnerable to Unrestricted Upload of File with Dangerous Type
Affected: before 6.0.0
CVE-2022-1033
7.8
1%
Mar 23
Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6
Affected: before 6.0.6
CVE-2023-46865
7.2
20%
Oct 30
/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of…
Affected: through 6.0.6
CVE-2022-1032
7.2
2%
Mar 29
Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6
Affected: before 6.0.6
CVE-2022-0242
7.2
1%
Jan 17
Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0
Affected: before 6.0
CVE-2022-0514
6.5
1%
Mar 21
Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5
Affected: before 6.0.5
CVE-2022-0372
5.4
1%
Jan 27
Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2
Affected: before 6.0.2
CVE-2022-0203
5.3
1%
Jan 26
Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2
Affected: before 6.0.2
CVE-2022-0515
4.3
0%
Mar 21
Cross-Site Request Forgery (CSRF) in GitHub repository crater-invoice/crater prior to 6.0.4
Affected: before 6.0.4
Showing 9