Archive

21 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /21 April 2022 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 4.3

CVE-2022-0515

Cross-Site Request Forgery (CSRF) in crater-invoice/crater

Cross-Site Request Forgery (CSRF) in GitHub repository crater-invoice/crater prior to 6.0.4.

crater-invoice crater-invoice/crater

Mar 21, 2022
Medium 6.5

CVE-2022-0514

Business Logic Errors in crater-invoice/crater

Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5.

crater-invoice crater-invoice/crater

Mar 21, 2022
Medium 4.3

CVE-2022-1004

Information disclosure in the External Interface

Accounted time is shown in the Ticket Detail View (External Interface), even if ExternalFrontend::TicketDetailView###AccountedTimeDisplay is disabled.

OTRS OTRS

Mar 21, 2022
Medium 6.4

CVE-2021-36100

Authenticated remote code execution

Specially crafted string in OTRS system configuration can allow the execution of any system command.

OTRS OTRS ((OTRS)) Community Edition OTRSSTORM Debian Ubuntu

Mar 21, 2022