Skip to content
OpenAdvisories

Package · Packagist

bottelet/flarepoint

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2022-22111

    DayByDay CRM - Missing Authorization when Changing Password

    In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has update user permission enabled is able to change the password of other users, including the administrator’s. This allows the attacker to gai…

    Bottelet DaybydayCRM flarepoint bottelet/flarepoint Packagist
  • High 7.5
    CVE-2022-22110

    DayByDay CRM - Weak Password Requirements in Update User

    In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality. A user with privileges to update his password could change it to a weak password, such as those with a length of a single character. This may allo…

    Bottelet DaybydayCRM flarepoint bottelet/flarepoint Packagist