crater-invoice vulnerabilities

CVEs per yearBy the year they were published

1. 20228
2. 20262

Newest CVEs

• CVE-2026-71242

  Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in NotePolicy

  crater-invoice · crater

  High8.2
• CVE-2026-55739

  Crater - Missing Tenant-Ownership Check in CustomerPolicy Allows Cross-Company Customer Data Theft and Deletion

  crater-invoice · Crater

  High8.2
• CVE-2022-1032

  Insecure deserialization of not validated module file in crater-invoice/crater

  crater-invoice · crater-invoice/crater

  High7.2
• CVE-2022-1033

  Unrestricted Upload of File with Dangerous Type in crater-invoice/crater

  crater-invoice · crater-invoice/crater

  High7.2
• CVE-2022-0515

  Cross-Site Request Forgery (CSRF) in crater-invoice/crater

  crater-invoice · crater-invoice/crater

  Medium4.3
• CVE-2022-0514

  Business Logic Errors in crater-invoice/crater

  crater-invoice · crater-invoice/crater

  Medium6.5
• CVE-2022-0372

  Cross-site Scripting (XSS) - Stored in crater-invoice/crater

  crater-invoice · crater-invoice/crater

  High7.6
• CVE-2022-0203

  Improper Access Control in crater-invoice/crater

  crater-invoice · crater-invoice/crater

  High7.5
• CVE-2022-0242

  Unrestricted Upload of File with Dangerous Type in crater-invoice/crater

  crater-invoice · crater-invoice/crater

  High7.2
• CVE-2021-4080

  Unrestricted Upload of File with Dangerous Type in crater-invoice/crater

  crater-invoice · crater-invoice/crater

  High8.8