Lucene search
Veracode Vulnerability DatabaseVERACODE:35404HistoryMay 06, 2022 - 6:23 a.m.
Cross-site Scripting (XSS)
2022-05-0606:23:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
cross-site scripting
yetiforce-crm
file upload
EPSS
0.001
Percentile
30.0%
yetiforce/yetiforce-crm is vulnerable to cross-site scripting. The vulnerability exists due to the lack of validation before uploading files in Fields.php, allowing an attacker to upload malicious files.
Related
prion
prion
Unrestricted file upload
2022-05-05 11:15:00
github
github
Unrestricted Upload of File with Dangerous Type in yetiforce-crm
2022-05-06 00:00:48
nvd
nvd
CVE-2022-1411
2022-05-05 11:15:08
osv
osv
CVE-2022-1411
2022-05-05 11:15:08
Unrestricted Upload of File with Dangerous Type in yetiforce-crm
2022-05-06 00:00:48
cvelist
cvelist
CVE-2022-1411 Unrestructed file upload in yetiforcecompany/yetiforcecrm
2022-05-05 10:30:12
huntr
huntr
Unrestructed file upload
2022-04-14 08:46:16
cve
cve
CVE-2022-1411
2022-05-05 11:15:08