Skip to content
OpenAdvisories

Vendor

JeromeDevome

3 known vulnerabilities.

Products

GRR 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-58256

    GRR vulnerable to Remote Code Execution Via PHP Code Injection

    GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector configuration parameters such as `ldap_filter`, poisoning `/personnalisation/config_…

    JeromeDevome GRR