Vulnerabilities

TI-2021-02993 CVE-2021-4117 · GHSA-cxg7-84wp-8pcq

Business Logic Errors in yetiforcecompany/yetiforcecrm

LOW 21

yetiforcecrm is vulnerable to Business Logic Errors

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00731 Published 2021-12-15 Fixed in 6.4.0 CWE-840

TI-2021-02992 CVE-2021-4116 · GHSA-fwh7-v4gf-xv7w

LOW 25

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2021-12-15 Fixed in 6.4.0 CWE-79

TI-2021-02989 CVE-2021-4111 · GHSA-7v7w-f7c6-f829

LOW 21

yetiforcecrm is vulnerable to Business Logic Errors

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00641 Published 2021-12-15 Fixed in 6.4.0 CWE-840