yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-4092 · ADVISORY
• yetiforcecompany/yetiforcecrm commit 585da04 · WEB
• yetiforcecompany/yetiforcecrm · PACKAGE
• huntr.dev/bounties/7b58c160-bb62-45fe-ad1f-38354378b89e · WEB

Lỗ hổng khác của yetiforce/yetiforce-crm

• CVE-2023-49508TRUNG BÌNH 6.5Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtai…
• CVE-2022-3002TRUNG BÌNH 5.4Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2022-3005TRUNG BÌNH 5.4Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2022-3004TRUNG BÌNH 5.4Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
• CVE-2022-3000TRUNG BÌNH 5.4Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.