Approved changes feed: RSS · Atom
cpe:2.3:a:opencrx:opencrx:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Opencrx (305f0539-9aaa-567c-ad00-8a1cea593a3b) |
|---|---|
| Product | Opencrx (20b07a8b-a490-5d36-947e-46c6ddca479b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/opencrx/opencrx |
purl2cpe | 2026-06-01 10:14:01.829768 |
pkg:maven/org.opencrx/opencrx-core |
purl2cpe | 2026-06-01 10:14:01.829771 |
pkg:sourceforge/opencrx |
purl2cpe | 2026-06-01 10:14:01.829773 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-40084 |
vulnerable | 2026-06-08 05:48:22.872866 |
Details available
OpenCRX before v5.2.2 was discovered to be vulnerable to password enumeration due to the difference in error messages received during a password reset which could enable an attacker to determine if a username, email or ID is valid.
Published: 2022-10-20T00:00:00.000Z
Updated: 2025-05-08T15:49:42.205Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25959 |
vulnerable | 2026-06-08 05:30:41.781765 |
OpenCRX - Reflected Cross-Site Scripting in Password Reset Functionality
MEDIUM (6.1)
In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.
Published: 2021-09-29T13:50:15.394Z
Updated: 2024-09-16T19:24:15.717Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7378 |
vulnerable | 2026-06-08 05:27:13.015735 |
CRIXP OpenCRX Unverified Password Change
CRITICAL (9.1)
CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the password of any user, including admin-Standard, to any chosen value. This issue was resolved in version 5.0-20200904, released September 4, 2020.
Published: 2020-11-24T16:35:15.035Z
Updated: 2024-09-16T20:37:06.713Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.