Morelitea vulnerabilities
We track 3 vulnerabilities in Morelitea products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 26, 2026.
Latest Morelitea vulnerabilities
- 7.5 High severity
initiative: Exposure of Sensitive Information to an Unauthorized Actor
Initiative is a self-hosted project management platform. An access control vulnerability exists in Initiative versions prior to 0.32.2 where uploaded documents are served from a publicly accessible /uploads/ directory without any authentication or authorizatio
- 8.1 High severity
Initiative is a self-hosted project management platform.
Initiative is a self-hosted project management platform. Versions of the application prior to 0.32.4 do not invalidate previously issued JWT access tokens after a user changes their password. As a result, older tokens remain valid until expiration and can stil
- 8.7 High severity
initiative: Improper Neutralization of Input During Web Page Generation
Initiative is a self-hosted project management platform. Versions of the application prior to 0.32.4 are vulnerable to Stored Cross-Site Scripting (XSS) in the document upload functionality. Any user with upload permissions within the "Initiatives" section can