CVE-2018-15918: Jorani Project Jorani

Medium severity, CVSS 5.4. EPSS: 2.9% chance of exploitation in the next 30 days.

An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissions to read and modify sensitive information from the database used by the application via the startdate or enddate parameter to leaves/validate.

Affected products

• Jorani Project Jorani: version 0.6.5 only

Published 2018-09-05. Last modified 2026-06-17.