~ / search / GHSA-7v7w-f7c6-f829

GHSA-7v7w-f7c6-f829

YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number

Source: GitHub Advisory Database (reviewed) High CVE-2021-4111

Packages

EcosystemPackageAffectedFixed in
Packagist yetiforce/yetiforce-crm <= 6.3.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number.

References

External links from the advisory. They lead to third-party sites.