CVE-2022-0269 — Cross-Site Request Forgery in Customer Relationship Management

CWE-352 — Cross-Site Request Forgery4 documents4 sources
Severity
8.0HIGHNVD
EPSS
0.1%
top 66.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Yetiforcecompany YetiforcecrmYetiforce Customer Relationship ManagementYetiforce Yetiforce-crm
Timeline
PublishedJan 24
Latest updateJan 27

Description

Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 2.1 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5yetiforcecompany/yetiforcecompany_yetiforcecrmunspecified — 6.3.0
▶Packagistyetiforce/yetiforce-crm6.3.0

Patches

Patch: github.com ↗Patch: huntr.dev ↗Patch: github.com ↗

🔴Vulnerability Details

3
OSV
Cross-Site Request Forgery in yetiforce↗2022-01-27
▶
GHSA
Cross-Site Request Forgery in yetiforce↗2022-01-27
▶
CVEList
Cross-Site Request Forgery (CSRF) in yetiforcecompany/yetiforcecrm↗2022-01-24
▶
CVE-2022-0269 — Cross-Site Request Forgery | cvebase