65 matches found
PT-2025-54470
Name of the Vulnerable Software and Affected Versions Titra versions prior to 0.99.49 Description Titra is open source project time tracking software. Prior to version 0.99.49, authenticated Admin users can modify the timeEntryRule value in the database. This value is then passed to a NodeVM valu...
EUVD-2022-34332
Malicious code in bioql PyPI...
EUVD-2022-34843
Malicious code in bioql PyPI...
EUVD-2022-34387
Malicious code in bioql PyPI...
CVE-2022-2029
Cross-site Scripting XSS - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2028
Cross-site Scripting XSS - Generic in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2595
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
CVE-2022-2595
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
CVE-2022-2595
CVE-2022-2595 concerns the GitHub repository kromitgmbh/titra, affected in versions prior to 0.79.1. The root cause is improper authorization in the Add Extension functionality, which can allow a low-privilege/unauthenticated user to upload a malicious extension and trigger remote code execution....
CVE-2022-2595 Improper Authorization in kromitgmbh/titra
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
PT-2022-17616 · Kromitgmbh · Titra
Name of the Vulnerable Software and Affected Versions: GitHub repository kromitgmbh/titra versions prior to 0.79.1 Description: The issue is related to improper authorization. Recommendations: For versions prior to 0.79.1, update to version 0.79.1 or later to resolve the issue...
titra 授权问题漏洞
titra is a modern open source time tracking project for freelancers and small teams. titra suffers from an authorization issue vulnerability that stems from improper authorization in titra prior to 0.79.1...
Cross-site Scripting (XSS) - Stored
Description Titra is vulnerable to Stored XSS in the Task field when creating a new task in a project. Steps to reproduce 1.In the Overview tab, click on New project button. 2.Enter a project name and click Save. 3.Move to the Tasks tab in that project and click on New Task button. 4.In the Task...
CVE-2022-2098
Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1...
CVE-2022-2098 Weak Password Requirements in kromitgmbh/titra
Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1...
CVE-2022-2098 Weak Password Requirements in kromitgmbh/titra
Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1...
titra 安全漏洞
titra is a modern open source time tracking project for freelancers and small teams. A security vulnerability exists in versions prior to titra 0.78.1, which stems from the application allowing the use of weak passwords...
Allows large characters in change password filling
Description The titra application allows large characters to insert in the input field "password" at password change feature which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request. Proof of Concept 1. Login and go to profile or https://app.titra.io/profile 2. Using...
Allows large characters in password filling
Description The titra application allows large characters to insert in the input field "password" which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request. Proof of Concept 1. Register a new account or go to https://app.titra.io/join?email= 2. Fill a normal email, fil...