Yetiforce Customer Relationship Management CVE-2021-4117

MEDIUM

Business Logic Errors (CWE-840)

2021-12-15 security@huntr.dev

Information Disclosure Yetiforce Customer Relationship Management

4.3

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

1

CVE Published

Dec 15, 2021 - 15:15 nvd

MEDIUM 4.3

DescriptionNVD

yetiforcecrm is vulnerable to Business Logic Errors

AnalysisAI

yetiforcecrm is vulnerable to Business Logic Errors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified under CWE-840. Affected products include: Yetiforce Yetiforce Customer Relationship Management.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Yetiforce Customer Relationship Management

View all

CVE-2022-1411 MEDIUM This Month POC

Unrestructed file upload in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Rated medium severity (CVSS

CVE-2021-4121 MEDIUM This Month POC

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). Rate

CVE-2021-4107 MEDIUM This Month POC

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). Rate

CVE-2022-3002 MEDIUM This Month POC

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Rated medium seve

CVE-2022-3005 MEDIUM This Month POC

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Rated medium seve

CVE-2022-3004 MEDIUM This Month POC

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Rated medium seve

CVE-2022-3000 MEDIUM This Month POC

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Rated medium seve

CVE-2022-2924 MEDIUM This Month POC

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3. Rated medium severi

CVE-2022-2829 MEDIUM This Month POC

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Rated medium seve

CVE-2022-2890 MEDIUM This Month POC

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Rated medium seve

CVE-2022-1340 MEDIUM This Month POC

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Rated medium seve

CVE-2021-4116 MEDIUM This Month POC

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). Rate

Same weakness CWE-840 – Business Logic Errors

View all

CVE-2022-4719 CRITICAL POC

CVE-2022-32207 CRITICAL POC

CVE-2022-0935 HIGH POC

CVE-2025-1908 HIGH POC

CVE-2021-22926 HIGH POC

CVE-2022-27782 HIGH POC

CVE-2022-1155 HIGH POC

CVE-2024-1456 HIGH POC

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2021-4117 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy