Timecamp Integration For Crm
Monthly
Authorization bypass in CodeCanyon's TimeCamp Integration for CRM (all versions through 2.8) allows authenticated remote attackers to manipulate the contact_id parameter submitted to the /clients/save_contact endpoint, overwriting or corrupting contact records belonging to other users without owning those records. The flaw is a classic Insecure Direct Object Reference (CWE-639): the application trusts the caller-supplied contact_id without verifying record ownership against the authenticated session. Publicly available exploit code exists on GitHub, materially lowering the barrier to exploitation.
Authorization bypass in CodeCanyon's TimeCamp Integration for CRM (all versions through 2.8) allows authenticated remote attackers to manipulate the contact_id parameter submitted to the /clients/save_contact endpoint, overwriting or corrupting contact records belonging to other users without owning those records. The flaw is a classic Insecure Direct Object Reference (CWE-639): the application trusts the caller-supplied contact_id without verifying record ownership against the authenticated session. Publicly available exploit code exists on GitHub, materially lowering the barrier to exploitation.