Login Request a demo
CR
Product
Crater
by Craterapp · last CVE Oct 30, 2023
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 5Medium 4Low 0
Severity
All severities9Critical0High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Crater to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-4080
8.8
1%
Jan 12
crater is vulnerable to Unrestricted Upload of File with Dangerous Type
Affected: before 6.0.0
CVE-2022-1033
7.8
1%
Mar 23
Unrestricted Upload of File with Dangerous Type in crater-invoice/crater
Affected: before 6.0.6
CVE-2023-46865
7.2
20%
Oct 30
/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of…
Affected: through 6.0.6
CVE-2022-1032
7.2
2%
Mar 29
Insecure deserialization of not validated module file in crater-invoice/crater
Affected: before 6.0.6
CVE-2022-0242
7.2
1%
Jan 17
Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0
Affected: before 6.0
Showing 5