MEDIUM6.1RubyGems
GHSA-4p8f-mmfj-r45g· CVE-2018-20975Cross-site scripting in fat_free_crm
Modified: 2/16/2024
package
RubyGems/fat_free_crm
pkg:rubygems/fat_free_crm
MEDIUMRubyGems
GHSA-4xq9-vw89-p5cx· CVE-2013-7224Fat Free CRM allows remote attackers to obtain sensitive information via a direct request
Modified: 12/3/2024
MEDIUMRubyGems
GHSA-9ggp-5rf4-x7q9· CVE-2013-7225Fat Free CRM vulnerable to SQL Injection
Modified: 12/3/2024
LOWRubyGems
GHSA-9pm8-vwc5-w2hmFat Free CRM has BOLA in DELETE /emails/:id - Any authenticated user can hit this endpoint and delete emails by ID
Modified: 4/14/2026
MEDIUMRubyGems
GHSA-f25h-3mj6-4jpg· CVE-2013-7249Fat Free CRM vulnerable to Exposure of Sensitive Information
Modified: 12/3/2024
MEDIUMRubyGems
GHSA-g897-cgfc-7q8v· CVE-2013-7222Fat Free CRM has fixed token value
Modified: 11/29/2024
MEDIUM6.1RubyGems
GHSA-j5rj-g695-342r· CVE-2018-1000842Fat Free CRM vulnerable to Cross-site Scripting
Modified: 2/16/2024
MEDIUMRubyGems
GHSA-mcvq-7xjq-46x6· CVE-2013-7223Fat Free CRM contains Cross-site Request Forgery vulnerablilities
Modified: 12/3/2024
MEDIUM6.5RubyGems
GHSA-p75c-5x3h-cxcg· CVE-2022-39281Fat Free CRM vulnerable to Remote Denial of Service via Tasks endpoint
Modified: 11/8/2023
MEDIUMRubyGems
GHSA-wcfx-3m6v-4frg· CVE-2014-5441Fat Free CRM subject to Cross-site Scripting
Modified: 12/3/2024
MEDIUMRubyGems
GHSA-wx7c-8j35-mpg8· CVE-2015-1585Fat Free CRM Cross-Site Request Forgery vulnerability
Modified: 12/6/2024