Skip to content
OpenAdvisories
High · 8.0 CVE-2022-0269 EUVD-2022-0500GHSA-7g7r-gr46-q4p5

Cross-Site Request Forgery (CSRF) in yetiforcecompany/yetiforcecrm

Published Jan 24, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: yetiforcecompany Product: yetiforcecompany/yetiforcecrm Package: yetiforce/yetiforce-crm Ecosystem: Packagist

Description

Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.

Affected products

VendorProductAffectedFixed
yetiforcecompany yetiforcecompany/yetiforcecrm unspecified – < 6.3.0 6.3.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist yetiforce/yetiforce-crm <= 6.3.0 — GHSA-7g7r-gr46-q4p5

References