Known Vulnerabilities for products from Opencrx
Listed below are 5 of the newest known vulnerabilities associated with the vendor "Opencrx".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-46502 json | An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery attack vi... | 9.8 - CRITICAL | 2023-10-30 | 2023-11-06 |
| CVE-2023-27150 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 5.4 - MEDIUM | 2023-12-26 | 2024-01-03 |
| CVE-2022-40084 json | OpenCRX before v5.2.2 was discovered to be vulnerable to password enumeration due to the difference in error messages receive... | 5.3 - MEDIUM | 2022-10-20 | 2023-11-07 |
| CVE-2021-25959 json | In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized paramet... | 6.1 - MEDIUM | 2021-09-29 | 2021-10-07 |
| CVE-2020-7378 json | CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker w... | 9.1 - CRITICAL | 2020-11-24 | 2020-12-07 |
Known software with vulnerabilities from Opencrx
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Opencrx | Opencrx | 4.0.0 |