Skip to content
OpenAdvisories

Vendor

kohler

4 known vulnerabilities.

Products

hotcrp 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-55493

    HotCRP: comment-author search exposes anonymous commenter identities

    HotCRP is conference review software. Starting with 2.101, the `cmt:` search term checks whether a comment is visible to the searching user but fails to check whether the commenter's identity should be visible. A `cmt:USER` search can therefore match a paper …

    kohler hotcrp
  • Medium 6.5
    CVE-2026-23878

    HotCRP vulnerable to exposure of submitted documents

    HotCRP is conference review software. Starting in commit aa20ef288828b04550950cf67c831af8a525f508 and prior to commit ceacd5f1476458792c44c6a993670f02c984b4a0, authors with at least one submission on a HotCRP site could use the document API to download any do…

    kohler hotcrp