Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1jeGc3LTg0d3AtOHBjcc0cog

YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product

YetiForceCRM is vulnerable to Business Logic Errors in the Weight of a Product since that value can be a negative number.

Permalink: https://github.com/advisories/GHSA-cxg7-84wp-8pcq
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jeGc3LTg0d3AtOHBjcc0cog
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 3 years ago
Updated: almost 2 years ago

CVSS Score: 4.3
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS Percentage: 0.00053
EPSS Percentile: 0.22506

Identifiers: GHSA-cxg7-84wp-8pcq, CVE-2021-4117
References:

• https://nvd.nist.gov/vuln/detail/CVE-2021-4117
• https://github.com/yetiforcecompany/yetiforcecrm/commit/8dccd93442725f245b4b71986bbe6f4f48639239
• https://huntr.dev/bounties/0b81e572-bdc9-4caf-aa02-81f3c7ad7c0a
• https://github.com/advisories/GHSA-cxg7-84wp-8pcq

Repository: https://github.com/yetiforcecompany/yetiforcecrm
Blast Radius: 1.0

Affected Packages