~ / search / GHSA-cxg7-84wp-8pcq

GHSA-cxg7-84wp-8pcq

YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-4117

Packages

EcosystemPackageAffectedFixed in
Packagist yetiforce/yetiforce-crm <= 6.3.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

YetiForceCRM is vulnerable to Business Logic Errors in the Weight of a Product since that value can be a negative number.

References

External links from the advisory. They lead to third-party sites.