CVE-2022-0269

HIGH

yetiforce/yetiforce-crm <6.3.0 - CSRF

Title source: llm

Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.

Core 2

Core References

Exploit, Patch, Third Party Advisory x_refsource_confirm

Patch, Third Party Advisory x_refsource_misc

CVSS v3 8.0

EPSS 0.0014

EPSS Percentile 33.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-352

Status published

Products (2)

yetiforce/yetiforce-crm 0Packagist

yetiforce/yetiforce_customer_relationship_management < 6.3.0

Published Jan 24, 2022

Tracked Since Feb 18, 2026