search

sapplica / sentrifugo

Sentrifugo is a FREE and powerful Human Resource Management System (HRMS) that can be easily configured to meet your organizational needs.
http://www.sentrifugo.com/
GNU General Public License v3.0
484 stars 426 forks source link

cve coordination on 11 vulnerabilites. #389

Open INCIBE-CNA opened 7 months ago

INCIBE-CNA commented 7 months ago

Dear sentrifugo team,

We are writing to you from INCIBE (https://www.incibe.es), the National Institute of Cybersecurity of Spain, about multiple vulnerabilities reported by an external researcher in one of your products.

We participate in the CVE Program as a CNA Root (https://www.cve.org/ProgramOrganization/Structure) , which enables us to assign and publish CVE codes.

Note that this report is not about an incident, nobody is exploiting the vulnerabilities. Simply, from INCIBE we take care of managing the CVE report, documentation and publication, in coordination with the affected parties.

As established in our disclosure policy (https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-assignment-publication), we are going to make this vulnerabilities public by the first week of January.

Is it possible to obtain some point of contact to send the vulenrability drafts ?.

Thank you very much and kind regards,

INCIBE-CNA commented 6 months ago

Please find attache the vulenrability details.

03_documentacion.zip