Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

yetiforce/yetiforce-crm

17 known vulnerabilities (2 critical, 5 high, 10 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
17 · 2 critical, 5 high, 10 medium
Registry
Packagist

Advisories 17

  • CVE-2023-49508Medium 6.5

    Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to…

    Affected: fixed in 6.5.0.

  • CVE-2022-3002Medium 5.4

    Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

    Affected: through 6.4.0.

  • CVE-2022-3005Medium 5.4

    Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

    Affected: through 6.4.0.

  • CVE-2022-3004Medium 6.3

    Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

    Affected: through 6.4.0.

  • CVE-2022-3000Medium 6.3

    Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

    Affected: through 6.4.0.

  • Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

    Affected: through 6.4.0.

  • CVE-2022-2890Critical 9.0

    Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

    Affected: fixed in 6.4.0.

  • Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

    Affected: fixed in 6.4.0.

  • CVE-2022-2885Medium 6.7

    Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

    Affected: fixed in 6.4.0.

  • CVE-2022-1411Critical 9.1

    Unrestructed file upload in yetiforcecompany/yetiforcecrm

    Affected: fixed in 6.4.0.

  • Cross-Site Request Forgery (CSRF) in yetiforcecompany/yetiforcecrm

    Affected: through 6.3.0.

  • CVE-2021-4121Medium 6.4

    Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

    Affected: through 6.3.0.

  • Business Logic Errors in yetiforcecompany/yetiforcecrm

    Affected: through 6.3.0.

  • CVE-2021-4116Medium 6.6

    Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

    Affected: through 6.3.0.

  • Business Logic Errors in yetiforcecompany/yetiforcecrm

    Affected: through 6.3.0.

Show all 17 advisoriesShow fewer advisories
  • CVE-2021-4107Medium 5.3

    Cross-site Scripting (XSS) - Reflected in yetiforcecompany/yetiforcecrm

    Affected: through 6.3.0.

  • CVE-2021-4092Medium 4.3

    Cross-Site Request Forgery (CSRF) in yetiforcecompany/yetiforcecrm

    Affected: fixed in 6.3.0.