Skip to content
OpenAdvisories
Medium · 6.7 CVE-2022-2885 EUVD-2022-6619GHSA-rjvc-mf7r-ch7r

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Published Aug 21, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: yetiforcecompany Product: yetiforcecompany/yetiforcecrm Package: yetiforce/yetiforce-crm Ecosystem: Packagist

Description

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

Affected products

VendorProductAffectedFixed
yetiforcecompany yetiforcecompany/yetiforcecrm unspecified – < 6.4.0 6.4.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist yetiforce/yetiforce-crm < 6.4.0 6.4.0 GHSA-rjvc-mf7r-ch7r

References