CVE-2025-41099

CVE-2025-41099 describes an insecure direct object reference in Bold Workplanner before version 2.5.25 (build 4935b438f9b). The issue arises from insufficient input validation, allowing an authenticated user to access the internal list of permissions using unauthorized internal identifiers, with ...

CVE-2023-43317

An issue in Coign CRM Portal v.06.06 allows a remote attacker to escalate privileges via the userPermissionsList parameter in Session Storage component...

Coign CRM Portal Security Vulnerability

Coign CRM Portal is a customer relationship management system from Coign, Inc. A security vulnerability exists in Coign CRM Portal version v.06.06 that originates from allowing remote attackers to escalate privileges via the userPermissionsList parameter in the Session Storage component...

PT-2024-13080 · Unknown · Coign Crm Portal

Name of the Vulnerable Software and Affected Versions: Coign CRM Portal version 06.06 Description: An issue in the software allows a remote attacker to escalate privileges via the userPermissionsList parameter in the Session Storage component. Recommendations: For Coign CRM Portal version 06.06,...