All 4 CVE vulnerabilities found in solidtime, with AI-generated Chinese analysis, references, and POCs.
Vendor: solidtime-io
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-76806 | Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle CWE-22 | 6.3 | Medium | 2026-11-04 |
| CVE-2026-47236 | Solidtime team page exposes pending invitation and member emails to employees who lack invitations:view/members:view permission CWE-863 | 4.3 | Medium | 2026-06-12 |
| CVE-2026-42279 | solidtime: Time entry update endpoint allows cross-organization modification of a known time-entry UUID CWE-639 | 5.8 | Medium | 2026-05-08 |
| CVE-2026-33345 | solidtime vulnerable to IDOR in private projects CWE-639 | 6.5 | Medium | 2026-03-24 |
All 4 known CVE vulnerabilities affecting solidtime with full Chinese analysis, references, and POCs where available.