crater-invoice

Products

ProductCVEsExploitedLatest
crater-invoice/crater8–Mar 29, 2022
Crater2–Aug 5, 2026

Exploited and recent CVEs

  • CVE-2026-71242 High 8.2 Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicy 0.4%
  • CVE-2026-55739 High 8.2 Crater - Missing Tenant-Ownership Check in CustomerPolicy Allows Cross-Company Customer Data Theft and Deletion 0.4%
  • CVE-2022-1032 High 7.2 Insecure deserialization of not validated module file in crater-invoice/crater 1.6%
  • CVE-2022-1033 High 7.2 Unrestricted Upload of File with Dangerous Type in crater-invoice/crater 0.9%
  • CVE-2022-0515 Medium 4.3 Cross-Site Request Forgery (CSRF) in crater-invoice/crater 0.4%
  • CVE-2022-0514 Medium 6.5 Business Logic Errors in crater-invoice/crater 1.0%
  • CVE-2022-0372 High 7.6 Cross-site Scripting (XSS) - Stored in crater-invoice/crater 0.6%
  • CVE-2022-0203 High 7.5 Improper Access Control in crater-invoice/crater 1.2%
  • CVE-2022-0242 High 7.2 Unrestricted Upload of File with Dangerous Type in crater-invoice/crater 1.4%
  • CVE-2021-4080 High 8.8 Unrestricted Upload of File with Dangerous Type in crater-invoice/crater 1.5%