notrinos

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

notrinos records in CISA KEV

No notrinos vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Notrinoserp · all components

TI-2023-10297 CVE-2023-24788 · GHSA-4pqp-69m3-f8pp

HIGH 73

NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03088 Published 2023-03-23 No fix listed CWE-89

TI-2022-02707 CVE-2022-2927 · GHSA-qhm8-69qh-g76j

MEDIUM 44

Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00959 Published 2022-08-22 Fixed in 0.7 CWE-521

TI-2022-02701 CVE-2022-2921 · GHSA-44w5-q257-8428

MEDIUM 41

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01399 Published 2022-08-21 Fixed in 0.7 CWE-359

TI-2022-02663 CVE-2022-2871 · GHSA-hrx5-cv4v-4c44

LOW 26

Cross-site Scripting (XSS) - Stored in GitHub repository notrinos/notrinoserp prior to 0.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00683 Published 2022-08-17 Fixed in 0.7 CWE-79

TI-2022-02739 CVE-2022-2965 · GHSA-f87g-r63w-q629

LOW 21

Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0074 Published 2022-08-23 Fixed in 0.7 CWE-1021