CVE-2022-1848

CVE-2022-1848 affects the Erudika Para project prior to version 1.45.11. Multiple connected sources describe a business logic error, including a race condition in com.erudika:para-core (validateObject) that can allow a user to abuse account/app-related logic. This is documented across sources (Gi...

CVE-2022-1782

CVE-2022-1782 affects the GitHub repo erudika/para, with a Cross-site Scripting (XSS) vulnerability in versions prior to v1.45.11. The root cause is described as a data handling flaw in the code path (Utils.java) that fails to filter/escape user input, enabling an attacker to inject JavaScript. I...