65 matches found
CVE-2022-2029
Cross-site Scripting XSS - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2028
Cross-site Scripting XSS - Generic in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2026
Cross-site Scripting XSS - Stored in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2028
Cross-site Scripting XSS - Generic in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2026
Cross-site Scripting XSS - Stored in GitHub repository kromitgmbh/titra prior to 0.77.0...
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository kromitgmbh/titra prior to 0.77.0...
titra 跨站脚本漏洞
titra is a modern open source time tracking project for freelancers and small teams. A cross-site scripting vulnerability exists in versions prior to titra 0.77.0, which stems from Generic Storage Cross-Site Scripting XSS...
titra 跨站脚本漏洞
titra is a modern open source time tracking project for freelancers and small teams. A cross-site scripting vulnerability exists in versions prior to titra 0.77.0, which stems from the presence of stored cross-site scripting XSS...
titra 安全漏洞
titra is a modern open source time tracking project for freelancers and small teams. A security vulnerability exists in versions prior to titra 0.77.0, which stems from improperly neutralized formula elements in CSV files...
titra 跨站脚本漏洞
titra is a modern open source time tracking project for freelancers and small teams. A cross-site scripting vulnerability exists in versions prior to titra 0.77.0, which stems from DOM stored cross-site scripting XSS...
CVE-2022-2026 Cross-site Scripting (XSS) - Stored in kromitgmbh/titra
Cross-site Scripting XSS - Stored in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2026
The CVE-2022-2026 issue affects the open-source time-tracking project TITRA (kromitgmbh/titra). It is a Stored XSS vulnerability reported to exist in versions prior to 0.77.0, with multiple sources (NVD entry, Red Hat advisory, CVE lists) confirming stored XSS in user-input contexts (e.g., names/...
CVE-2022-2027
CVE-2022-2027 concerns the GitHub project kromitgmbh/titra and describes an vulnerability in how CSV files are handled. The root cause is improper neutralization of formula elements in CSV content, enabling a potential CSV/Formula Injection. Affected versions are those prior to 0.77.0; the vulner...
CVE-2022-2027 Improper Neutralization of Formula Elements in a CSV File in kromitgmbh/titra
Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2027 Improper Neutralization of Formula Elements in a CSV File in kromitgmbh/titra
Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2028 Cross-site Scripting (XSS) - Generic in kromitgmbh/titra
Cross-site Scripting XSS - Generic in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2028
CVE-2022-2028 is a stored XSS vulnerability in the open-source time-tracking project titra (GitHub: kromitgmbh/titra) affecting versions prior to 0.77.0. The issue has been observed as a Stored XSS in the Project Name field (example payload provided), enabling injection when a project name is sav...