Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jqqg-v7qj-c3jq

Опубликовано: 05 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.1
CVSS3: 6.3

Описание

A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenant Handler. The manipulation of the argument ID results in authorization bypass. The attack may be performed from remote. The exploit is now public and may be used.

A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenant Handler. The manipulation of the argument ID results in authorization bypass. The attack may be performed from remote. The exploit is now public and may be used.

EPSS

Процентиль: 12%
0.00211
Низкий

2.1 Low

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 6.3
nvd
3 месяца назад

A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenant Handler. The manipulation of the argument ID results in authorization bypass. The attack may be performed from remote. The exploit is now public and may be used.

EPSS

Процентиль: 12%
0.00211
Низкий

2.1 Low

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-285