CVE-2022-2921 | BDVDB-2026-182765 Detail

Description#

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality such as create/update companies, install/update languages, install/activate extensions, install/activate themes and other permissive actions.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-08-21Record published in the CVE List.
2. Version 22024-08-03Most recent update recorded in the CVE List.