Idurarapp maintains a focused web-based application platform centered on its Idurar product, with a durable signal centered on application-layer input-handling and access-control issues such as path traversal, cross-site scripting, and SQL injection. Treat this as a compact vendor profile; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Idurarapp over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-27742CRITICAL IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login. | May 16, 2023 | 9.8 | 29 | NO | NO |
CVE-2024-47769HIGH IDURAR is open source ERP CRM accounting invoicing software. The vulnerability exists in the corePublicRouter.js file. Using the reference usage here, it is identified that the pub | Oct 4, 2024 | 7.5 | 22 | NO | NO |
CVE-2024-25164HIGH iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality. | Mar 5, 2024 | 7.5 | 20 | NO | NO |
CVE-2023-52265MEDIUM IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data. | Dec 30, 2023 | 5.4 | 17 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Idurarapp.
Media articles that mention a CVE ID that affects a product developed by Idurarapp — matched by CVE ID, not by vendor name.