Manager vulnerabilities
2 known vulnerabilities in Manager from Manager-io. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
2critical
0high
0exploited
10.0average CVSS score
Latest first
- 10.0 Critical severity
Manager: Time-of-check Time-of-use (TOCTOU) Race Condition
Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal network resources. The flaw lies in the fundamental design of the DNS validation mechanis
- 10.0 Critical severity
Manager: Server-Side Request Forgery
Manager-io/Manager is accounting software. A critical unauthenticated full read Server-Side Request Forgery (SSRF) vulnerability has been identified in the proxy handler component of both manager Desktop and Server edition versions up to and including 25.7.18.