Zurmo Crm Security Vulnerabilities and Issues — Zurmo Crm CVE List

Lucene search

ZurmoZurmo Crm

4 matches found

CVE•added 2017/04/14 6:59 p.m.•35 views

CVE-2017-7188

Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse.

5.4CVSS5.2AI score0.00933EPSS

CVE•added 2017/11/06 8:29 a.m.•34 views

CVE-2017-15039

Cross-site scripting (XSS) exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting.

4.8CVSS4.9AI score0.00193EPSS

CVE•added 2017/12/31 7:29 p.m.•33 views

CVE-2017-18004

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.

5.4CVSS5.2AI score0.00206EPSS

CVE•added 2017/11/06 8:29 a.m.•31 views

CVE-2017-16569

An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting.

4.9CVSS5.1AI score0.00137EPSS