Chitora soft — Vulnerabilities & Security Advisories 4

Chitora soft develops enterprise resource planning (ERP) software for supply chain management. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and access controls. The company has four CVEs on record, including critical RCE vulnerabilities in their web components that could allow attackers to execute arbitrary code with system privileges. While no major public security incidents have been documented, the consistent pattern of vulnerabilities in their authentication and session management systems suggests ongoing security challenges that require remediation.