Notrinos
Notrinoserp: vulnerabilidades y CVE
Notrinoserp tiene 5 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-24788 | Alta (8.8) | 3.1% | — | 23 mar 2023 | NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php. |
| CVE-2022-2965 | Media (4.3) | 0.72% | — | 23 ago 2022 | Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7. |
| CVE-2022-2927 | Crítica (9.8) | 0.91% | — | 22 ago 2022 | Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7. |
| CVE-2022-2921 | Alta (8.8) | 1.3% | — | 21 ago 2022 | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain… |
| CVE-2022-2871 | Media (5.4) | 0.65% | — | 17 ago 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository notrinos/notrinoserp prior to 0.7. |