Executive brief
Fat Free CRM vulnerable to Remote Denial of Service via Tasks endpoint
Affected products
- RubyGems fat_free_crm
Junglewise Threat Intelligence
CVE-2022-39281: Fat Free CRM vulnerable to Remote Denial of Service via Tasks endpoint
CVE-2022-39281 · Severity: low · CVSS 3.1 · Published 2022-10-07
Technologies: fat_free_crm (RubyGems). Vendors: RubyGems.
Related threats
- Fat Free CRM BOLA in Email Dropbox
- Fat Free CRM has BOLA in DELETE /emails/:id - Any authenticated user can hit this endpoint and delete emails by ID
- Withdrawn Advisory: Fat Free CRM Cross-site Scripting vulnerability
- Fat Free CRM allows remote attackers to obtain sensitive information via a direct request
- Fat Free CRM contains Cross-site Request Forgery vulnerablilities