Skip to content
OpenAdvisories

Vendor

spiral-project

1 known vulnerabilities.

Products

ihatemoney 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2020-15120

    Authorization Bypass in I hate money

    In "I hate money" before version 4.1.5, an authenticated member of one project can modify and delete members of another project, without knowledge of this other project's private code. This can be further exploited to access all bills of another project witho…

    spiral-project ihatemoney ihatemoney PyPI