PT-2026-95659

Name of the Vulnerable Software and Affected Versions CordysCRM versions prior to 1.7.2 Description An authentication bypass exists in the getMcpField function of the McpController because the ShiroFilter.addPublicPathFilters method marks the /mcp/ path as anonymous and the controller lacks a...