Lucene search
RubySecRUBY:FAT_FREE_CRM-2013-7224-101447HistoryDec 23, 2013 - 8:00 p.m.
Fat Free CRM Gem for Ruby allows remote attackers to obtain sensitive informations
2013-12-2320:00:00
RubySec
nvd.nist.gov
4
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.007
Percentile
80.6%
Fat Free CRM contains a flaw in user controllers that is triggered as JSON
requests are rendered with a full JSON object. This may allow a remote
attacker to gain access to potentially sensitive information e.g. other
users password hashes.
Affected configurations
Node
rubyfat_free_crmRange≤0.13.0
ORrubyfat_free_crmRange0.12.0–0.12.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ruby | fat_free_crm | * | cpe:2.3:a:ruby:fat_free_crm:*:*:*:*:*:*:*:* |
References
Related
osv
osv
Fat Free CRM allows remote attackers to obtain sensitive information via a direct request
2022-05-17 04:55:27
Fat Free CRM vulnerable to Exposure of Sensitive Information
2022-05-17 04:55:27
nvd
nvd
CVE-2013-7224
2014-01-02 14:59:04
CVE-2013-7249
2014-01-02 14:59:04
prion
prion
Cross site request forgery (csrf)
2014-01-02 14:59:00
Design/Logic Flaw
2014-01-02 14:59:00
cve
cve
CVE-2013-7224
2014-01-02 14:59:04
CVE-2013-7249
2014-01-02 14:59:04
github
github
Fat Free CRM allows remote attackers to obtain sensitive information via a direct request
2022-05-17 04:55:27
Fat Free CRM vulnerable to Exposure of Sensitive Information
2022-05-17 04:55:27
cvelist
cvelist
CVE-2013-7224
2014-01-02 11:00:00
CVE-2013-7249
2014-01-02 11:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.007
Percentile
80.6%
Related for RUBY:FAT_FREE_CRM-2013-7224-101447