Zephyr Project Manager
Dylan James
Developer
3.3.205
Latest version
1,000
Installations
No date
Last updated
Vulnerability history
0 present
19 fixed
9 Mitigation rules
- Authenticated (Subscriber+) Limited Privilege Escalation vulnerability<= 3.3.101Feb 2, 2026
- Authenticated (Custom+) Arbitrary File Read And Server-Side Request Forgery vulnerability<= 3.3.203Dec 17, 2025
- Authenticated (Admin+) Stored Cross-Site Scripting vulnerability<= 3.3.202Sep 26, 2025
- Broken Access Control Vulnerability<= 3.3.201Aug 26, 2025
- Broken Access Control Vulnerability<= 3.3.200Apr 16, 2025
- Cross Site Scripting (XSS) vulnerability<= 3.3.101Apr 10, 2025
- Insecure Direct Object References (IDOR) vulnerability<= 3.3.102Aug 20, 2024
- Cross Site Scripting (XSS) vulnerability<= 3.3.102Aug 20, 2024
- Insecure Direct Object References (IDOR) vulnerability<= 3.3.100Aug 16, 2024
- Authenticated (Subscriber+) Stored Cross-Site Scripting via filename Parameter vulnerability<= 3.3.100Aug 5, 2024
- Editor+ stored XSS vulnerability< 3.3.99Jul 30, 2024
- Sensitive Data Exposure via Export File vulnerability<= 3.3.99Jul 12, 2024
- Privilege Escalation vulnerability<= 3.3.97Jul 4, 2024
- Cross Site Request Forgery (CSRF) vulnerability<= 3.3.93Jun 13, 2023
- Open Redirection vulnerability<= 3.3.9Apr 27, 2023
- Reflected Cross-Site Scripting (XSS) vulnerability< 3.2.5Aug 29, 2022
- Unauthorized REST Calls to Stored Cross-Site Scripting (XSS) vulnerability< 3.2.5Aug 29, 2022
- Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities< 3.2.5Aug 29, 2022
- Reflected Cross-Site Scripting (XSS) vulnerability<= 3.2.40May 23, 2022