CVE-2021-4117

Impact

YetiForceCRM is vulnerable to Business Logic Errors in the Weight of a Product since that value can be a negative number.

Affected packages

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/yetiforcecompany/yetiforcecrm/commit/8dccd93442725f245b4b71986bbe6f4f48639239
• https://huntr.dev/bounties/0b81e572-bdc9-4caf-aa02-81f3c7ad7c0a
• https://github.com/advisories/GHSA-cxg7-84wp-8pcq
• https://nvd.nist.gov/vuln/detail/CVE-2021-4117