Improper access control

Incorrect Access Control in AfficheExplorateurParam in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers...

CVE-2019-14765

Incorrect Access Control in AfficheExplorateurParam in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers...

CVE-2019-14765

CVE-2019-14765 affects DIMO YellowBox CRM prior to version 6.3.4. The root cause is Incorrect Access Control in AfficheExplorateurParam(), allowing a standard authenticated user to access administrative controllers. CVSSv3.1 base score is 8.8 (HIGH) with network access, low attack complexity, and...