Lucene search
Veracode Vulnerability DatabaseVERACODE:33039HistoryNov 22, 2021 - 3:23 a.m.
Cross-site Request Forgery (CSRF)
2021-11-2203:23:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
21.7%
oro/crm is vulnerable to cross-site forgery request attacks. The vulnerability exists due to an Insufficient permissions check in ‘disqualifyAction’ function which allows an attacker to execute the lead action without CSRF token check.
Related
cve
cve
CVE-2021-39198
2021-11-19 22:15:07
osv
osv
The disqualify lead action may be executed without CSRF token check
2021-11-19 20:18:54
CVE-2021-39198
2021-11-19 22:15:07
prion
prion
Cross site request forgery (csrf)
2021-11-19 22:15:00
nvd
nvd
CVE-2021-39198
2021-11-19 22:15:07
github
github
The disqualify lead action may be executed without CSRF token check
2021-11-19 20:18:54
cvelist
cvelist