Time Tracker Security Vulnerabilities and Issues — Time Tracker CVE List

Lucene search

AnukoTime Tracker

2 matches found

CVE•added 2020/11/16 4:15 p.m.•55 views

CVE-2020-27422

In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an attacker to use the same link to takeover the account.

9.8CVSS9.4AI score0.09002EPSS

CVE•added 2020/11/16 4:15 p.m.•45 views

CVE-2020-27423

Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user's mailbox

7.5CVSS7.5AI score0.1372EPSS