fat_free_crm (RubyGems)
Advisories
16
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 0.26.0 or later clears every advisory below that has a fix.
Upgrade commands
bundler
bundle update fat_free_crm # Gemfile: gem "fat_free_crm", ">= 0.26.0"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-9pm8-vwc5-w2hm Fat Free CRM has BOLA in DELETE /emails/:id - Any authenticated user can hit this endpoint and delete emails by ID |
Low | < 0.26.0 | 0.26.0 |
| GHSA-p75c-5x3h-cxcg Fat Free CRM vulnerable to Remote Denial of Service via Tasks endpoint |
Medium EPSS 1.78% |
< 0.20.1 | 0.20.1 |
| GHSA-gmg5-r3c4-3fm9 Withdrawn Advisory: Fat Free CRM Cross-site Scripting vulnerability Withdrawn |
Medium EPSS 4.70% |
<= 0.19.0 | No fix yet |
| GHSA-f25h-3mj6-4jpg Fat Free CRM vulnerable to Exposure of Sensitive Information |
Medium EPSS 2.55% |
< 0.12.1 | 0.12.1 |
| GHSA-g897-cgfc-7q8v Fat Free CRM has fixed token value |
Medium EPSS 2.42% |
< 0.12.1 | 0.12.1 |
| GHSA-mcvq-7xjq-46x6 Fat Free CRM contains Cross-site Request Forgery vulnerablilities |
Medium EPSS 1.20% |
< 0.12.1 | 0.12.1 |
| GHSA-9ggp-5rf4-x7q9 Fat Free CRM vulnerable to SQL Injection |
Medium EPSS 1.93% |
< 0.12.1 | 0.12.1 |
| GHSA-4xq9-vw89-p5cx Fat Free CRM allows remote attackers to obtain sensitive information via a direct request |
Medium EPSS 2.53% |
< 0.12.1 | 0.12.1 |
| GHSA-wcfx-3m6v-4frg Fat Free CRM subject to Cross-site Scripting |
Medium EPSS 1.93% |
>= 0.11.1, < 0.13.3 | 0.13.3 |
| GHSA-wx7c-8j35-mpg8 Fat Free CRM Cross-Site Request Forgery vulnerability |
Medium EPSS 1.09% |
< 0.13.6 | 0.13.6 |
| GHSA-4p8f-mmfj-r45g Cross-site scripting in fat_free_crm |
Medium EPSS 1.25% |
< 0.18.1 | 0.18.1 |
| GHSA-j5rj-g695-342r Fat Free CRM vulnerable to Cross-site Scripting |
Medium EPSS 1.67% |
>= 0.18.0, < 0.18.1 | 0.18.1 |
| GHSA-j5rj-g695-342r Fat Free CRM vulnerable to Cross-site Scripting |
Medium EPSS 1.67% |
>= 0.17.0, < 0.17.3 | 0.17.3 |
| GHSA-j5rj-g695-342r Fat Free CRM vulnerable to Cross-site Scripting |
Medium EPSS 1.67% |
>= 0.16.0, < 0.16.4 | 0.16.4 |
| GHSA-j5rj-g695-342r Fat Free CRM vulnerable to Cross-site Scripting |
Medium EPSS 1.67% |
>= 0.15.0, < 0.15.2 | 0.15.2 |
| GHSA-j5rj-g695-342r Fat Free CRM vulnerable to Cross-site Scripting |
Medium EPSS 1.67% |
< 0.14.2 | 0.14.2 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor