JeromeDevome güvenlik açıkları (CVE)

JeromeDevome için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç
7.2Yüksek
CVE-2026-58257

GRR vulnerable to Arbitrary File Read and Deletion

JeromeDevome GRR

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or de…

9.1Kritik
CVE-2026-58256

GRR vulnerable to Remote Code Execution Via PHP Code Injection

JeromeDevome GRR

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector configuration parameters such as `ldap_filter`, poisoning `/personnalisation/config_…

8.1Yüksek
CVE-2026-58205

GRR has a Reflected XSS issue

JeromeDevome GRR

GRR is a resource management and reservation application. Prior to version 4.5.0, `maj.php` reflects the `forcemaj` parameter without adequate escaping when installation files remain accessible. Removal of these files is not automatic. An attacker can craft a…