Skip to content
OpenAdvisories
Critical · 9.0 CVE-2022-2890 EUVD-2022-6577GHSA-jhxh-68jj-68c7

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Published Aug 22, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: yetiforcecompany Product: yetiforcecompany/yetiforcecrm Package: yetiforce/yetiforce-crm Ecosystem: Packagist

Description

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

Affected products

VendorProductAffectedFixed
yetiforcecompany yetiforcecompany/yetiforcecrm unspecified – < 6.4.0 6.4.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist yetiforce/yetiforce-crm < 6.4.0 6.4.0 GHSA-jhxh-68jj-68c7

References