Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Oroinc Subscribe
Filtered by product Client Relationship Management
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-39198 1 Oroinc 1 Client Relationship Management 2021-11-23 5.8 MEDIUM 5.4 MEDIUM
OroCRM is an open source Client Relationship Management (CRM) application. Affected versions we found to suffer from a vulnerability which could an attacker is able to disqualify any Lead with a Cross-Site Request Forgery (CSRF) attack. There are no workarounds that address this vulnerability and all users are advised to update their package.