CVE-2026-21694 - CERT CVE
ID CVE-2026-21694
Sažetak Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50.
Reference
CVSS
Base: 6.8
Impact: 5.2
Exploitability:1.6
Pristup
VektorSloženostAutentikacija
NETWORK HIGH LOW
Impact
PovjerljivostCjelovitostDostupnost
HIGH HIGH NONE
CVSS vektor CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Zadnje važnije ažuriranje 12-01-2026 - 18:44
Objavljeno 08-01-2026 - 00:15