fat_free_crm vulnerabilities (RubyGems)

11 vulnerabilities.

• fat_free_crm RubyGems Fat Free CRM has BOLA in DELETE /emails/:id - Any authenticated user can hit this endpoint and delete emails by ID GHSA-9pm8-vwc5-w2hm Fix available 2.1 LowApril 14, 2026
• fat_free_crm RubyGems Remote Denial of Service via Tasks endpoint in fat_free_crm CVE-2022-39281 Fix available 6.5 MediumOctober 7, 2022
• fat_free_crm RubyGems Cross-site scripting in fat_free_crm CVE-2018-20975 Fix available 6.1 MediumAugust 20, 2019
• fat_free_crm RubyGems Fat Free CRM vulnerable to Cross-site Scripting CVE-2018-1000842 Fix available 6.1 MediumDecember 20, 2018
• fat_free_crm RubyGems Fat Free CRM Cross-Site Request Forgery vulnerability CVE-2015-1585 Fix available 6.8 MediumFebruary 19, 2015
• fat_free_crm RubyGems Fat Free CRM subject to Cross-site Scripting CVE-2014-5441 Fix available 4.3 MediumSeptember 12, 2014
• fat_free_crm RubyGems Fat Free CRM vulnerable to Exposure of Sensitive Information CVE-2013-7249 Fix available 5.0 MediumJanuary 2, 2014
• fat_free_crm RubyGems Fat Free CRM vulnerable to SQL Injection CVE-2013-7225 Fix available 6.5 MediumJanuary 2, 2014
• fat_free_crm RubyGems Fat Free CRM allows remote attackers to obtain sensitive information via a direct request CVE-2013-7224 Fix available 5.0 MediumJanuary 2, 2014
• fat_free_crm RubyGems Fat Free CRM contains Cross-site Request Forgery vulnerablilities CVE-2013-7223 Fix available 6.8 MediumJanuary 2, 2014
• fat_free_crm RubyGems Fat Free CRM has fixed token value CVE-2013-7222 Fix available 5.0 MediumJanuary 2, 2014