In short
- CVE-2015-1585 is a MEDIUM (CVSS 6.8) vulnerability affecting fat_free_crm, fat free crm (fatfreecrm).
- Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.6% of all vulnerabilities.
- Fix: update to 0.13.6 or later.
Description
Fat Free CRM before 0.13.6 allows remote attackers to conduct cross-site request forgery (CSRF) attacks via a request without the authenticity_token, as demonstrated by a crafted HTML page that creates a new administrator account.
NVD description
Fat Free CRM before 0.13.6 allows remote attackers to conduct cross-site request forgery (CSRF) attacks via a request without the authenticity_token, as demonstrated by a crafted HTML page that creates a new administrator account.
More vulnerabilities in fat_free_crm
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free