Jorani

Products

ProductCVEsExploitedLatest
Jorani5–Oct 13, 2026

Exploited and recent CVEs

  • CVE-2026-110100 Medium 5.4 Jorani before 1.0.4 Missing Authorization and SSRF via Contracts::import() 0.2%
  • CVE-2026-110099 Medium 4.3 Jorani before 1.0.4 Missing Authorization in HR Export Actions 0.3%
  • CVE-2026-110098 Medium 5.4 Jorani before 1.0.4 Insecure Direct Object Reference in Leave and Overtime Requests 0.2%
  • CVE-2023-53870 Medium 5.1 Jorani 1.0.3 Cross-Site Scripting Vulnerability via Language Parameter 0.4%
  • CVE-2023-2681 High 8.8 SQL Injection on Jorani 0.8%