notrinoserp vulnerabilities and fixes

Recent CVEs affecting notrinoserp, with upgrade or downgrade steps. 5 tracked.

notrinoserp has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2023-03-23. Highest priority: CVE-2022-2927 (score 59/100).

• CVE-2023-24788 HIGH 8.8 DOWNGRADE NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /Not
• CVE-2022-2965 MEDIUM 4.3 UPGRADE Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7.
• CVE-2022-2927 CRITICAL 9.8 UPGRADE Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7.
• CVE-2022-2921 HIGH 8.8 UPGRADE Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp pr
• CVE-2022-2871 MEDIUM 5.4 UPGRADE Cross-site Scripting (XSS) - Stored in GitHub repository notrinos/notrinoserp prior to 0.7.

FAQ

How do I fix notrinoserp vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is notrinoserp being exploited right now?

None of the tracked notrinoserp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which notrinoserp CVE should I patch first?

CVE-2022-2927 currently ranks highest (59/100): Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7..

RSS feed for notrinoserp · ← Back to latest CVEs