Carrental Project Carrental — known CVE vulnerabilities

Every CVE whose affected-product data names Carrental Project Carrental, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-33517 — CVSS 7.5 (high): carRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end System).
• CVE-2025-9310 — CVSS 5.3 (medium): A vulnerability was determined in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. Affected by this vulnerability is an…