Executive brief
Exposure of password hashes in notrinos/notrinos-erp
Affected products
- Packagist notrinos/notrinos-erp
Junglewise Threat Intelligence
CVE-2022-2921: Exposure of password hashes in notrinos/notrinos-erp
CVE-2022-2921 · Severity: low · CVSS 3.1 · Published 2022-08-22
Technologies: notrinos/notrinos-erp (Packagist). Vendors: Packagist.
Related threats
- NotrinosERP: Authenticated arbitrary file upload leads to remote code execution via HRM employee "Documents" (doc_file)
- NotrinosERP arbitrary file upload in HRM employee documents
- NotrinosERP vulnerable to SQL Injection
- Missing password strength check in notrinos/notrinos-erp
- NotrinosERP Cross-site Scripting vulnerability