EUVD-2021-2396

Malware in sbrugna...

CVE-2021-39198

OroCRM is an open source Client Relationship Management CRM application. Affected versions we found to suffer from a vulnerability which could an attacker is able to disqualify any Lead with a Cross-Site Request Forgery CSRF attack. There are no workarounds that address this vulnerability and all...

Open Redirect

OroCRM is vulnerable to Open Redirect. The vulnerability is due to improper validation of URLs, allowing attackers to redirect users to external websites...

GHSA-V8HP-239V-9367 OroCRM Forced Redirect to External Website

OroCRM is prone to open redirection which could allow attackers to redirect users to external website...

OroCRM Forced Redirect to External Website

OroCRM is prone to open redirection which could allow attackers to redirect users to external website...

PT-2024-40470 · Orocrm · Orocrm

Name of the Vulnerable Software and Affected Versions: OroCRM affected versions not specified Description: The issue allows attackers to redirect users to an external website due to open redirection. Recommendations: At the moment, there is no information about a newer version that contains a fix...

OroCRM Access Control Error Vulnerability

OroCrm is an open source customer relationship management Crm application from Oro. It is used to create 360° views of customers across multiple channels, organize sales channels, manage account and contact information, communicate with customers, run marketing campaigns and track campaign...

CVE-2021-39198

OroCRM is an open source Client Relationship Management CRM application. Affected versions we found to suffer from a vulnerability which could an attacker is able to disqualify any Lead with a Cross-Site Request Forgery CSRF attack. There are no workarounds that address this vulnerability and all...

CVE-2021-39198

OroCRM is an open source Client Relationship Management CRM application. Affected versions we found to suffer from a vulnerability which could an attacker is able to disqualify any Lead with a Cross-Site Request Forgery CSRF attack. There are no workarounds that address this vulnerability and all...

Cross site request forgery (csrf)

OroCRM is an open source Client Relationship Management CRM application. Affected versions we found to suffer from a vulnerability which could an attacker is able to disqualify any Lead with a Cross-Site Request Forgery CSRF attack. There are no workarounds that address this vulnerability and all...

CVE-2021-39198 The disqualify lead action may be executed without CSRF token check

OroCRM is an open source Client Relationship Management CRM application. Affected versions we found to suffer from a vulnerability which could an attacker is able to disqualify any Lead with a Cross-Site Request Forgery CSRF attack. There are no workarounds that address this vulnerability and all...

CVE-2021-39198

CVE-2021-39198 affects OroCRM. Multiple sources confirm a CSRF flaw that allows an attacker to disqualify a Lead via the disqualifyAction without a valid CSRF token. Root cause cited in Veracode advisories as an insufficient permissions check in the action handler. Impact is scaleable: leads can ...

CVE-2021-39198: Cross-Site Request Forgery (CSRF)

OroCRM is an open source Client Relationship Management CRM application. Affected versions we found to suffer from a vulnerability which could an attacker is able to disqualify any Lead with a Cross-Site Request Forgery CSRF attack. There are no workarounds that address this vulnerability and all...

OroCrm 跨站请求伪造漏洞

OroCrm is an open source Customer Relationship Management Crm application from Oro Corporation. It is used to create 360° views of customers across multiple channels, organize sales channels, manage account and contact information, communicate with customers, run marketing campaigns and track...

Forced Redirect to External Website

More info at https://www.orocrm.com/blog/news/orocrm-security-announcement...

Forced Redirect to External Website

More info at https://www.orocrm.com/blog/news/orocrm-security-announcement...

OroCRM - Stored XSS Vulnerability

No description provided by source. Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your commerce business. It's the CRM built for both sales and marketing! Discovered by: Provensec Website: http://www.provensec.com Author: Provensec Labs...

OroCRM Cross Site Scripting

Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your commerce business. It's the CRM built for both sales and marketing! Discovered by: Provensec Website: http://www.provensec.com Author: Provensec Labs Type of vulnerability: XSS Stored...

OroCRM - Stored XSS Vulnerability

Exploit for php platform in category web applications Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your commerce business. It's the CRM built for both sales and marketing! Discovered by: Provensec Website: http://www.provensec.com Autho...

OroCRM - Persistent Cross-Site Scripting

Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your commerce business. It's the CRM built for both sales and marketing! Discovered by: Provensec Website: http://www.provensec.com Author: Provensec Labs Type of vulnerability: XSS Stored...