pkg:RubyGems/fat_free_crm

All known vulnerabilities

• MEDIUM6.5CVE-2022-39281Fat Free CRM vulnerable to Remote Denial of Service via Tasks endpoint
  from 0, < 0.20.1
• MEDIUM6.1CVE-2018-20975Cross-site scripting in fat_free_crm
  from 0, < 0.18.1
• MEDIUM6.1CVE-2018-1000842Fat Free CRM vulnerable to Cross-site Scripting
  from 0, < 0.14.2
• —CVE-2013-7224Fat Free CRM allows remote attackers to obtain sensitive information via a direct request
  from 0, < 0.12.1
• —Fat Free CRM vulnerable to SQL Injection
  from 0, < 0.12.1
• —Fat Free CRM vulnerable to Exposure of Sensitive Information
  from 0, < 0.12.1
• —Fat Free CRM has fixed token value
  from 0, < 0.12.1
• —Fat Free CRM contains Cross-site Request Forgery vulnerablilities
  from 0, < 0.12.1
• —Fat Free CRM subject to Cross-site Scripting
  >= 0.11.1, < 0.13.3
• —Fat Free CRM Cross-Site Request Forgery vulnerability
  from 0, < 0.13.6