CR
Vendor
crater-invoice
10
CVEs
0
On KEV
0
New 30D
Products
CR8.8
crater-invoice/crater
crater-invoice
8 CVEs0 on KEV0 new
CR8.3
crater
crater-invoice
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-71242 | CR crater crater-invoice | 8.3 | Aug 5 | Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicy |
| CVE-2026-55739 | CR Crater crater-invoice | 8.3 | Aug 5 | Crater - Missing Tenant-Ownership Check in CustomerPolicy Allows Cross-Company Customer Data Theft and Deletion |
| CVE-2022-1032 | CR crater-invoice/crater crater-invoice | 7.2 | Mar 29 | Insecure deserialization of not validated module file in crater-invoice/crater |
| CVE-2022-1033 | CR crater-invoice/crater crater-invoice | 7.8 | Mar 23 | Unrestricted Upload of File with Dangerous Type in crater-invoice/crater |
| CVE-2022-0515 | CR crater-invoice/crater crater-invoice | 4.3 | Mar 21 | Cross-Site Request Forgery (CSRF) in crater-invoice/crater |
| CVE-2022-0514 | CR crater-invoice/crater crater-invoice | 6.5 | Mar 21 | Business Logic Errors in crater-invoice/crater |
| CVE-2022-0372 | CR crater-invoice/crater crater-invoice | 5.4 | Jan 27 | Cross-site Scripting (XSS) - Stored in crater-invoice/crater |
| CVE-2022-0203 | CR crater-invoice/crater crater-invoice | 5.3 | Jan 26 | Improper Access Control in crater-invoice/crater |
| CVE-2022-0242 | CR crater-invoice/crater crater-invoice | 7.2 | Jan 17 | Unrestricted Upload of File with Dangerous Type in crater-invoice/crater |
| CVE-2021-4080 | CR crater-invoice/crater crater-invoice | 8.8 | Jan 12 | Unrestricted Upload of File with Dangerous Type in crater-invoice/crater |