CVE-2022-34132

Description

References

• bbalet/jorani commit c5c42e2 · Patch
• bbalet/jorani · Issue Tracking

Weitere Schwachstellen in jorani

• CVE-2025-67102HOCH 7.6A SQL injection vulnerability in the alldayoffs feature in Jorani up to v1.0.4, allows an authenticated attacker to execute arbitrary SQL co…
• CVE-2023-2681HOCH 8.8An SQL Injection vulnerability has been found on Jorani version 1.0.0. This vulnerability allows an authenticated remote user, with low priv…
• CVE-2023-26469KRITISCH 9.8In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.
• CVE-2022-48118MITTEL 6.1Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Acronym parameter.
• CVE-2022-34134HOCH 8.8Jorani v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /application/controllers/Users.php.