TI-2022-18657 CVE-2022-39281 · GHSA-p75c-5x3h-cxcg
Remote Denial of Service via Tasks endpoint in fat_free_crm
Priority LOW 32
fat_free_crm is a an open source, Ruby on Rails customer relationship management platform (CRM).
fatfreecrm
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
fatfreecrm records in CISA KEVNo fatfreecrm vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Fatfreecrm · all components
TI-2018-16064 CVE-2018-1000842 · GHSA-j5rj-g695-342r
FatFreeCRM version <=0.14.1, >=0.15.0 <=0.15.1, >=0.16.0 <=0.16.3, >=0.17.0 <=0.17.2…
Priority LOW 31
FatFreeCRM version <=0.14.1, >=0.15.0 <=0.15.1, >=0.16.0 <=0.16.3, >=0.17.0 <=0.17.2, ==0.18.0 contains a Cross Site Scripting (XSS) vulnerability in commit 6d60bc8ed010c4eda05d6645c64849f415f68d65 that can result in Jav…