Package · Packagist

bytefury/crater

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

High 7.6

CVE-2022-0372

Cross-site Scripting (XSS) - Stored in crater-invoice/crater

Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2.

crater-invoice crater-invoice/crater bytefury/crater Packagist

Jan 27, 2022
High 7.5

CVE-2022-0203

Improper Access Control in crater-invoice/crater

Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2.

crater-invoice crater-invoice/crater bytefury/crater Packagist

Jan 26, 2022
High 7.2

CVE-2022-0242

Unrestricted Upload of File with Dangerous Type in crater-invoice/crater

Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.

crater-invoice crater-invoice/crater bytefury/crater Packagist

Jan 17, 2022
High 8.8

CVE-2021-4080

Unrestricted Upload of File with Dangerous Type in crater-invoice/crater

crater is vulnerable to Unrestricted Upload of File with Dangerous Type

crater-invoice crater-invoice/crater bytefury/crater Packagist

Jan 12, 2022