Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-46865
7.2
HIGHCVSS v3
Published
October 30, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.
crater-invoice-inc/crater
GitHubOpen Source Invoicing Solution for Individuals & Businesses
GitHubOpen Source Invoicing Solution for Individuals & Businesses<= 6.0.6NVD