Yetiforce 18 CVEs across 1 Yetiforce products. Browse Yetiforce vulnerabilities, severities, and proof-of-concept exploits.
Yetiforce products with known CVEs Yetiforce CVEs — newest first CVE Severity Score Published Summary CVE-2023-49508Medium 6.52024-02-16 Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive informa… CVE-2022-3002Medium 5.42022-10-06 Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. CVE-2022-3005Medium 5.42022-09-20 Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. CVE-2022-3004Medium 5.42022-09-20 Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. CVE-2022-3000Medium 5.42022-09-20 Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. CVE-2022-2924Medium 5.42022-09-20 Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3. CVE-2022-2829Medium 5.42022-08-23 Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. CVE-2022-2890Medium 5.42022-08-22 Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. CVE-2022-1340Medium 5.42022-08-22 Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. CVE-2022-2885Medium 4.82022-08-21 Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. CVE-2022-1411Medium 6.12022-05-05 Unrestructed file upload in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Attacker can send malicious files to the victims is able to retriev… CVE-2022-0269High 8.02022-01-24 Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0. CVE-2021-4121Medium 6.12021-12-16 yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-4117Medium 4.32021-12-15 yetiforcecrm is vulnerable to Business Logic Errors CVE-2021-4116Medium 5.42021-12-15 yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-4111Medium 4.32021-12-15 yetiforcecrm is vulnerable to Business Logic Errors CVE-2021-4107Medium 6.12021-12-14 yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-4092Medium 4.32021-12-11 yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)