Cross-site Scripting in OpenCRX

In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting XSS, due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance...

CVE-2021-25959

In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting XSS, due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance...

CVE-2021-25959

In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting XSS, due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance...

Cross site scripting

In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting XSS, due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance...

CVE-2021-25959

OpenCRX is affected by a reflected XSS vulnerability (CVE-2021-25959) in versions 4.0.0–5.1.0, caused by unsanitized password-reset parameters. This can allow execution of external JavaScript on any user of the instance. The linked connected advisories confirm the issue exists in OpenCRX and desc...

CVE-2021-25959 OpenCRX - Reflected Cross-Site Scripting in Password Reset Functionality

In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting XSS, due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance...

OpenCrx 跨站脚本漏洞

OpenCrx is an open source Crm software. A cross-site scripting vulnerability exists in OpenCRX, which stems from the fact that versions v4.0.0 through v5.1.0 are vulnerable to Reflected Cross-Site Scripting XSS in OpenCRX due to uncleaned parameters in the password reset function. This allows...

CVE-2020-7378

CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the password of any user, including admin-Standard, to any chosen value. This issue was resolved in versio...

CVE-2020-7378

CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the password of any user, including admin-Standard, to any chosen value. This issue was resolved in versio...

Design/Logic Flaw

CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the password of any user, including admin-Standard, to any chosen value. This issue was resolved in versio...

CVE-2020-7378 CRIXP OpenCRX Unverified Password Change

CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance can change the password of any user, including admin-Standard, to any chosen value. This issue was resolved in versio...

CVE-2020-7378

CVE-2020-7378 affects CRIXP OpenCRX versions 4.30 and 5.0-20200717 (and prior). The vulnerability is an unverified password change flaw that lets an attacker who can reach the OpenCRX instance change any user’s password (including admin-Standard) to an attacker-chosen value. Rapid7 and NVD descri...

CVE-2020-7378: OpenCRX Unverified Password Change (FIXED)

OpenCRX version 4.30 and version 5.0-20200717 suffers from an unverified password change vulnerability, which is an instance of CWE-620. This vulnerability has a CVSSv3 score of 9.1, which is usually CRITICAL, since it effectively allows anyone who can connect to the OpenCRX server to change the...

Crixp Opencrx License Issue Vulnerability

Crixp Crixp Opencrx is a website builder for managing the sales process from the Swiss company Crixp. The system is based on the Java API of the Java client and the Swagger-compatible RESTful API and can be used in sales, service, marketing, contact center and issue management scenarios. A securi...