All 8 CVE vulnerabilities found in crater-invoice/crater, with AI-generated Chinese analysis, references, and POCs.
Vendor: crater-invoice
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2022-1032 | Insecure deserialization of not validated module file in crater-invoice/crater CWE-502 | 7.2 | - | 2022-03-29 |
| CVE-2022-1033 | Unrestricted Upload of File with Dangerous Type in crater-invoice/crater CWE-434 | 6.7 | - | 2022-03-23 |
| CVE-2022-0515 | Cross-Site Request Forgery (CSRF) in crater-invoice/crater CWE-352 | 4.3 | - | 2022-03-21 |
| CVE-2022-0514 | Business Logic Errors in crater-invoice/crater CWE-840 | 6.5 | - | 2022-03-21 |
| CVE-2022-0372 | Cross-site Scripting (XSS) - Stored in crater-invoice/crater CWE-79 | 5.4 | - | 2022-01-27 |
| CVE-2022-0203 | Improper Access Control in crater-invoice/crater CWE-284 | 4.3 | - | 2022-01-26 |
| CVE-2022-0242 | Unrestricted Upload of File with Dangerous Type in crater-invoice/crater CWE-434 | 6.7 | - | 2022-01-17 |
| CVE-2021-4080 | Unrestricted Upload of File with Dangerous Type in crater-invoice/crater CWE-434 | 7.2 | - | 2022-01-12 |
All 8 known CVE vulnerabilities affecting crater-invoice/crater with full Chinese analysis, references, and POCs where available.