repository icon
kromitgmbh / titra Project repository

titra - modern open source project time tracking for freelancers and small teams

Submit a report

FIRST INTERACTION

WITHIN2 DAYS

REVIEW

WITHIN4 DAYS

FIX

WITHIN4 DAYS

Clickjacking
jeffreygaor
self closed
No Rate Limiting on Reset Password Page led to Email Bomb and Email Resources Dr...
jeffreygaor
not applicable
xmlrpc.php FILE IS enable it will used for Bruteforce attack and Denial of Servi...
nilabhrajpoot
not applicable
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
7h3h4ckv157
not applicable
RCE due to Improper Authorization in 'Add Extension' functionality
hak2learn
Critical
•$5•CVE-2022-2595
Business Logic Errors
khanhchauminh
not applicable
Clickjacking vulnerability
khanhchauminh
not applicable
Cross-site Scripting (XSS) - Stored
khanhchauminh
Critical
•$6
Allows large characters in change password filling
lengochoa7112000
High
•$5
Allows large characters in password filling
lengochoa7112000
High
•$5
Weak Password Policy
lengochoa7112000
High
•$5
Generation of Error Message Containing Sensitive Information
lengochoa7112000
High
•$5
CORS: arbitrary origin trusted
kmaron1n
not applicable
Weak policy at Change password function
kmaron1n
High
•$5•CVE-2022-2098
UI REDRESSING
tharunavula
Critical
•$5
stored xss
tharunavula
Critical
•$5
Generation of Error Message Containing Sensitive Information
lengochoa7112000
High
•$5
UI Redressing
lengochoa7112000
High
•$5
Weak Password Policy
lengochoa7112000
High
•$5
Stored XSS in Task field
saharshtapi
High
•$5•CVE-2022-2029
Stored XSS in Project Name
saharshtapi
High
•$5•CVE-2022-2028
Formula Injection/CSV Injection due to Improper Neutralization of Formula Elemen...
saharshtapi
High
•$5•CVE-2022-2027
Stored XSS in Name
saharshtapi
High
•$5•CVE-2022-2026