Lucene search
GoogleOSV:CVE-2021-39198HistoryNov 19, 2021 - 10:15 p.m.
CVE-2021-39198
2021-11-1922:15:07
Google
osv.dev
1
0.001 Low
EPSS
Percentile
21.7%
OroCRM is an open source Client Relationship Management (CRM) application. Affected versions we found to suffer from a vulnerability which could an attacker is able to disqualify any Lead with a Cross-Site Request Forgery (CSRF) attack. There are no workarounds that address this vulnerability and all users are advised to update their package.
Related
cve
cve
CVE-2021-39198
2021-11-19 22:15:07
osv
osv
The disqualify lead action may be executed without CSRF token check
2021-11-19 20:18:54
prion
prion
Cross site request forgery (csrf)
2021-11-19 22:15:00
nvd
nvd
CVE-2021-39198
2021-11-19 22:15:07
github
github
The disqualify lead action may be executed without CSRF token check
2021-11-19 20:18:54
veracode
veracode
Cross-site Request Forgery (CSRF)
2021-11-22 03:23:45
cvelist
cvelist