Read the docs

anuko

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

anuko records in CISA KEV

No anuko vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Time Tracker 12 records HIGH

Records

12 records in Time Tracker · all components

TI-2022-08522 CVE-2022-24707

SQL injection in anuko timetracker

Priority HIGH 71

Anuko Time Tracker is an open source, web-based time tracking application written in PHP.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07159 Published 2022-02-23 Fixed in 1.20.0.5642 CWE-89
TI-2020-12027 CVE-2020-15255

CSV injection in Anuko Time Tracker

Priority MEDIUM 44

In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treated as formulas by spreadsheet software (for example, when a cell value…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.03504 Published 2020-10-16 Fixed in 1.19.23.5325 CWE-74
TI-2021-04452 CVE-2021-21352

Predictable tokens used for password resets

Priority MEDIUM 42

Anuko Time Tracker is an open source, web-based time tracking application written in PHP.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01545 Published 2021-03-03 Fixed in 1.19.24.5415 CWE-330
TI-2021-19657 CVE-2021-43851

SQL injection vulnerability in anuko timetracker

Priority MEDIUM 40

Anuko Time Tracker is an open source, web-based time tracking application written in PHP.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01203 Published 2021-12-21 Fixed in 1.19.33.5607 CWE-89
TI-2021-17978 CVE-2021-41139

Reflected XSS vulnerability in time.php

Priority LOW 37

Anuko Time Tracker is an open source, web-based time tracking application written in PHP.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01023 Published 2021-10-13 Fixed in 1.19.30.5600 CWE-79
TI-2021-10149 CVE-2021-29436

Cross site request forgery in anuko timetracker

Priority LOW 36

Anuko Time Tracker is an open source, web-based time tracking application written in PHP.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00525 Published 2021-04-13 Fixed in 1.19.27.5431 CWE-352
TI-2022-08523 CVE-2022-24708

Stored XSS vulnerability in anuko/timetracker

Priority LOW 30

Anuko Time Tracker is an open source, web-based time tracking application written in PHP.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00552 Published 2022-02-23 Fixed in 1.20.0.5646 CWE-79
Open these records in search →