Skip to content
OpenAdvisories

Package · Packagist

oro/crm

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    GHSA-v8hp-239v-9367

    OroCRM Forced Redirect to External Website

    OroCRM is prone to open redirection which could allow attackers to redirect users to external website.

    oro/crm Packagist
  • Medium 4.2
    CVE-2021-39198

    The disqualify lead action may be executed without CSRF token check

    OroCRM is an open source Client Relationship Management (CRM) application. Affected versions we found to suffer from a vulnerability which could an attacker is able to disqualify any Lead with a Cross-Site Request Forgery (CSRF) attack. There are no workaroun…

    oroinc crm oro/crm Packagist