CVE-2022-2921

CVE-2022-2921 is a critical vulnerability affecting notrinos/notrinoserp prior to version 0.7, allowing for the exposure of private personal information and privilege escalation to a system administrator account. This flaw enables an attacker to gain unauthorized access to sensitive functionalities like company management, language updates, and extension/theme installations. With a CVSS score of 8.8 (HIGH), the vulnerability is easily exploitable over the network with low privileges and no user interaction, leading to high impacts on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.