Vendors / Idurarapp Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Idurarapp records in CISA KEV No Idurarapp vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00869 · Published 2024-03-04 · No fix listed CWE-22
Priority HIGH 66
IDURAR is open source ERP CRM accounting invoicing software.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00767 · Published 2024-10-04 · No fix listed CWE-22
Priority MEDIUM 58
IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00402 · Published 2023-12-30 · No fix listed CWE-79
Priority MEDIUM 51
IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00934 · Published 2023-05-16 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
1 2 1 0 0
