Vulnerabilities

TI-2022-06457 CVE-2022-22110 · GHSA-96v6-hrwg-p378

DayByDay CRM - Weak Password Requirements in Update User

LOW 35

In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01159 Published 2022-01-05 Fixed in 2.2.1 CWE-521

TI-2022-06455 CVE-2022-22108 · GHSA-frxp-xxx8-hrg6

LOW 21

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00702 Published 2022-01-05 Fixed in 2.2.1 CWE-862

TI-2022-06454 CVE-2022-22107 · GHSA-44gv-fgcj-w546

LOW 21

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00702 Published 2022-01-05 Fixed in 2.2.1 CWE-862