Skip to contentGuchengwuyue Yshop-crm vulnerabilities
- guchengwuyue yshop-crmyshop-crm through 2.1.3 IDOR via CRM customer by-id endpointsCVE-2026-1117035.3 Medium
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via invoice check endpointCVE-2026-1091735.3 Medium
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via contract-receivables check endpointCVE-2026-1091725.3 Medium
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via /admin-api/crm/contract/checkCVE-2026-1091715.3 Medium
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User ListingCVE-2026-924637.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStepCVE-2026-924627.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain EndpointCVE-2026-924615.3 Medium
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log ListingCVE-2026-924607.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim EndpointCVE-2026-924597.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via StoreProductController onSaleCVE-2026-924585.3 Medium
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoiceCVE-2026-924577.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration EndpointsCVE-2026-924567.1 High
- guchengwuyue yshop-crmyshop-crm through 2.1.3 Missing Authorization via CRM Customer Messaging EndpointsCVE-2026-924555.3 Medium