medium4.3
CVE-2021-4092
yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)
Impact
yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yetiforce | Yetiforce Customer Relationship Management | before 6.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/yetiforcecompany/yetiforcecrm/commit/585da04bb72d36a894f6ea5939ab909e53fd8c23
- https://huntr.dev/bounties/7b58c160-bb62-45fe-ad1f-38354378b89e
- https://github.com/yetiforcecompany/yetiforcecrm/commit/585da04bb72d36a894f6ea5939ab909e53fd8c23
- https://huntr.dev/bounties/7b58c160-bb62-45fe-ad1f-38354378b89e