GCVE - cpe:2.3:a:notrinos:notrinoserp:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:notrinos:notrinoserp:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Notrinos (`9776a1de-a370-59db-b684-d64180978115`)
Product	Notrinoserp (`ec28e08c-407a-5cc8-a9da-2c58333425ec`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/notrinos/notrinoserp`	purl2cpe	2026-06-01 10:16:32.968349
`pkg:sourceforge/notrinos-erp`	purl2cpe	2026-06-01 10:16:32.968352

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-2965`	vulnerable	2026-06-08 05:43:36.803173	Improper Restriction of Rendered UI Layers or Frames in notrinos/notrinoserp MEDIUM (6.4) Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7. Published: 2022-08-23T15:40:09.000Z Updated: 2024-08-03T00:52:59.886Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/61e3bdf7-3548-45ea-b105-967abc0977f4 https://github.com/notrinos/notrinoserp/commit/c2ff3d8e85a811003b796ca38f5b3290deeaa3aa	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2927`	vulnerable	2026-06-08 05:43:36.726383	Weak Password Requirements in notrinos/notrinoserp HIGH (7.3) Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7. Published: 2022-08-22T08:55:09.000Z Updated: 2024-08-03T00:53:00.428Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/7fa956dd-f541-4dcd-987d-ba15caa6a886 https://github.com/notrinos/notrinoserp/commit/e61e76b44c6a2b28a4a648a06ef34f65c376ec1e	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2921`	vulnerable	2026-06-08 05:43:36.717641	Exposure of Private Personal Information to an Unauthorized Actor in notrinos/notrinoserp HIGH (8.8) Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality such as create/update companies, install/update languages, install/activate extensions, install/activate themes and other permissive actions. Published: 2022-08-21T03:15:20.000Z Updated: 2024-08-03T00:52:59.889Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/51b32a1c-946b-4390-a212-b6c4b6e4115c https://github.com/notrinos/notrinoserp/commit/1b9903f4deea3289872793e60d730c63ecbf7b45	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2871`	vulnerable	2026-06-08 05:43:36.647596	Cross-site Scripting (XSS) - Stored in notrinos/notrinoserp MEDIUM (4.6) Cross-site Scripting (XSS) - Stored in GitHub repository notrinos/notrinoserp prior to 0.7. Published: 2022-08-17T09:00:17.000Z Updated: 2024-08-03T00:52:59.647Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/61126c07-22ac-4961-a198-1aa33060b373 https://github.com/notrinos/notrinoserp/commit/0362778f4f678156c22a009094225823df8a4760	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.