CVE-2022-2921: Notrinos Notrinoserp

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality such as create/update companies, install/update languages, install/activate extensions, install/activate themes and other permissive actions.

Affected products

• Notrinos Notrinoserp: before 0.7 (fixed in 0.7)

Published 2022-08-21. Last modified 2026-06-17.