Skip to content
OpenAdvisories

Vendor

DjangoCRM

4 known vulnerabilities.

Products

django-crm 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-90806

    DjangoCRM django-crm Bulk Case Update bulk_views.py BulkUpdateCasesView authorization

    A vulnerability has been found in DjangoCRM django-crm up to 1.2. This vulnerability affects the function BulkUpdateCasesView of the file backend/cases/bulk_views.py of the component Bulk Case Update. The manipulation leads to missing authorization. The attac…

    DjangoCRM django-crm
  • Medium 4.3
    CVE-2026-71240

    DjangoCRM - Unauthenticated Open Redirect via toggle_default_sorting next_url Parameter

    DjangoCRM's toggle_default_sorting view is the only route in common/urls.py that is not wrapped in login_required or staff_member_required, and it redirects to a caller-supplied next_url GET parameter after only checking secure_url(next_url), which merely ver…

    DjangoCRM django-crm