Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Vendor: anuko Clear all filters
TI-2022-08522 CVE-2022-24707

SQL injection in anuko timetracker

Priority HIGH 71

Anuko Time Tracker is an open source, web-based time tracking application written in PHP.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07159 Published 2022-02-23 Fixed in 1.20.0.5642 CWE-89
TI-2022-08523 CVE-2022-24708

Stored XSS vulnerability in anuko/timetracker

Priority LOW 30

Anuko Time Tracker is an open source, web-based time tracking application written in PHP.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00552 Published 2022-02-23 Fixed in 1.20.0.5646 CWE-79
TI-2021-19657 CVE-2021-43851

SQL injection vulnerability in anuko timetracker

Priority MEDIUM 40

Anuko Time Tracker is an open source, web-based time tracking application written in PHP.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01203 Published 2021-12-21 Fixed in 1.19.33.5607 CWE-89
TI-2021-17995 CVE-2021-41156

Reflected XSS in anuko timetracker

Priority LOW 31

anuko/timetracker is an, open source time tracking system.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00494 Published 2021-10-18 Fixed in 1.19.30.5601 CWE-79
TI-2021-17978 CVE-2021-41139

Reflected XSS vulnerability in time.php

Priority LOW 37

Anuko Time Tracker is an open source, web-based time tracking application written in PHP.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01023 Published 2021-10-13 Fixed in 1.19.30.5600 CWE-79
TI-2021-10149 CVE-2021-29436

Cross site request forgery in anuko timetracker

Priority LOW 36

Anuko Time Tracker is an open source, web-based time tracking application written in PHP.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00525 Published 2021-04-13 Fixed in 1.19.27.5431 CWE-352
TI-2021-04452 CVE-2021-21352

Predictable tokens used for password resets

Priority MEDIUM 42

Anuko Time Tracker is an open source, web-based time tracking application written in PHP.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01545 Published 2021-03-03 Fixed in 1.19.24.5415 CWE-330
TI-2020-12027 CVE-2020-15255

CSV injection in Anuko Time Tracker

Priority MEDIUM 44

In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treated as formulas by spreadsheet software (for example, when a cell value…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.03504 Published 2020-10-16 Fixed in 1.19.23.5325 CWE-74