Read the docs

kromitgmbh

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

kromitgmbh records in CISA KEV

No kromitgmbh vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Titra 9 records HIGH

Records

9 records in Titra · all components

TI-2026-17477 CVE-2026-21694

Titra APIs have Improper Access Control

Priority HIGH 70

Titra is open source project time tracking software.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00284 Published 2026-01-07 Fixed in 0.99.50 CWE-284
TI-2022-02397 CVE-2022-2595 · GHSA-mxq5-wxjq-c9cc

Improper Authorization in kromitgmbh/titra

Priority MEDIUM 46

Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01357 Published 2022-08-01 Fixed in 0.79.1 CWE-285
TI-2022-01941 CVE-2022-2098 · GHSA-mc35-xf46-w84x

Weak Password Requirements in kromitgmbh/titra

Priority MEDIUM 44

Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01062 Published 2022-06-16 Fixed in 0.78.1 CWE-521
TI-2022-01881 CVE-2022-2029 · GHSA-57gq-f3vc-mw6h

Cross-site Scripting (XSS) - DOM in kromitgmbh/titra

Priority LOW 26

Cross-site Scripting (XSS) - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0072 Published 2022-06-08 Fixed in 0.77.0 CWE-79
TI-2022-01878 CVE-2022-2026 · GHSA-xghh-rrw6-jc8f

Cross-site Scripting (XSS) - Stored in kromitgmbh/titra

Priority LOW 26

Cross-site Scripting (XSS) - Stored in GitHub repository kromitgmbh/titra prior to 0.77.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0072 Published 2022-06-08 Fixed in 0.77.0 CWE-79
Open these records in search →