Kromit Titra — known CVE vulnerabilities

Every CVE whose affected-product data names Kromit Titra, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2022-2595 — CVSS 10.0 (critical): Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1.
• CVE-2022-2098 — CVSS 9.8 (critical): Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1.
• CVE-2025-69288 — CVSS 9.1 (critical): Titra is open source project time tracking software. Prior to version 0.99.49, Titra allows any authenticated Admin user to modify the…
• CVE-2022-2027 — CVSS 8.0 (high): Improper Neutralization of Formula Elements in a CSV File in GitHub repository kromitgmbh/titra prior to 0.77.0.
• CVE-2026-21694 — CVSS 6.8 (medium): Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and…
• CVE-2022-2026 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository kromitgmbh/titra prior to 0.77.0.
• CVE-2022-2028 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Generic in GitHub repository kromitgmbh/titra prior to 0.77.0.
• CVE-2022-2029 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0.
• CVE-2026-21695 — CVSS 4.3 (medium): Titra is open source project time tracking software. In versions 0.99.49 and below, an API has a Mass Assignment vulnerability which allows…