CVE-2021-4092

yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)

Score

CVSS 3.1 4.3 Medium

Status

Modified - security@huntr.dev

Published

2021-12-11

Last modified

2024-08-03

Weaknesses

CWE-352

Affected products

• Yetiforce Customer Relationship Management (Yetiforce)
• Yetiforcecompanyyetiforcecrm (Yetiforcecompany)

References

• https://github.com/yetiforcecompany/yetiforcecrm/commit/585da04bb72d36a894f6ea5939ab909e53fd8c23
• https://huntr.dev/bounties/7b58c160-bb62-45fe-ad1f-38354378b89e