Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: kromitgmbh Clear all filters
TI-2026-17477 CVE-2026-21694

Titra APIs have Improper Access Control

Priority HIGH 70

Titra is open source project time tracking software.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00284 Published 2026-01-07 Fixed in 0.99.50 CWE-284
TI-2022-02397 CVE-2022-2595 · GHSA-mxq5-wxjq-c9cc

Improper Authorization in kromitgmbh/titra

Priority MEDIUM 46

Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01357 Published 2022-08-01 Fixed in 0.79.1 CWE-285
TI-2022-01941 CVE-2022-2098 · GHSA-mc35-xf46-w84x

Weak Password Requirements in kromitgmbh/titra

Priority MEDIUM 44

Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01062 Published 2022-06-16 Fixed in 0.78.1 CWE-521
TI-2022-01878 CVE-2022-2026 · GHSA-xghh-rrw6-jc8f

Cross-site Scripting (XSS) - Stored in kromitgmbh/titra

Priority LOW 26

Cross-site Scripting (XSS) - Stored in GitHub repository kromitgmbh/titra prior to 0.77.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0072 Published 2022-06-08 Fixed in 0.77.0 CWE-79
TI-2022-01881 CVE-2022-2029 · GHSA-57gq-f3vc-mw6h

Cross-site Scripting (XSS) - DOM in kromitgmbh/titra

Priority LOW 26

Cross-site Scripting (XSS) - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0072 Published 2022-06-08 Fixed in 0.77.0 CWE-79