Lucene search
China National Vulnerability DatabaseCNVD-2022-08153HistoryJan 26, 2022 - 12:00 a.m.
YetiForceCrm Cross-site Request Forgery Vulnerability (CNVD-2022-08153)
2022-01-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
yetiforcecrm
cross-site request forgery
vulnerability
polish company
client-side data
javascript code
EPSS
0.001
Percentile
40.4%
YetiForceCrm is an open source Crm system from the Polish company YetiForce. YetiForceCrm version 6.3.0 previously contained a cross-site request forgery vulnerability, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute JavaScript code on the client side.
Related
prion
prion
Cross site request forgery (csrf)
2022-01-24 12:15:00
veracode
veracode
Cross-Site Request Forgery (CSRF)
2022-01-25 05:41:14
github
github
Cross-Site Request Forgery in yetiforce
2022-01-27 16:21:33
cve
cve
CVE-2022-0269
2022-01-24 12:15:07
nvd
nvd
CVE-2022-0269
2022-01-24 12:15:07
osv
osv
CVE-2022-0269
2022-01-24 12:15:07
Cross-Site Request Forgery in yetiforce
2022-01-27 16:21:33
cvelist
cvelist
huntr
huntr
Cross-Site Request Forgery (CSRF) in yetiforcecompany/yetiforcecrm
2022-01-12 12:01:52