JeromeDevome Schwachstellen (CVE)

Für JeromeDevome veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse
7.2Hoch
CVE-2026-58257

GRR vulnerable to Arbitrary File Read and Deletion

JeromeDevome GRR

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or de…

9.1Kritisch
CVE-2026-58256

GRR vulnerable to Remote Code Execution Via PHP Code Injection

JeromeDevome GRR

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector configuration parameters such as `ldap_filter`, poisoning `/personnalisation/config_…

8.1Hoch
CVE-2026-58205

GRR has a Reflected XSS issue

JeromeDevome GRR

GRR is a resource management and reservation application. Prior to version 4.5.0, `maj.php` reflects the `forcemaj` parameter without adequate escaping when installation files remain accessible. Removal of these files is not automatic. An attacker can craft a…