JeromeDevome vulnerabilities
We track 3 vulnerabilities in JeromeDevome products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
Latest JeromeDevome vulnerabilities
- 7.2 High severity
GRR: Improper Limitation of a Pathname to a Restricted Directory
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or del
- 9.1 Critical severity
GRR: Improper Control of Generation of Code
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector configuration parameters such as `ldap_filter`, poisoning `/personnalisation/config_l
- 8.1 High severity
GRR: Improper Neutralization of Input During Web Page Generation
GRR is a resource management and reservation application. Prior to version 4.5.0, `maj.php` reflects the `forcemaj` parameter without adequate escaping when installation files remain accessible. Removal of these files is not automatic. An attacker can craft a