Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-7224
5
MEDIUMCVSS v2
Published
January 2, 2014
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json.
fatfreecrm/fat_free_crm
GitHubRuby on Rails CRM platform
GitHubRuby on Rails CRM platform= 0.11.0, = 0.9.10, = 0.9.8, = 0.9.7, = 0.10.1, = 0.11.1, <= 0.12.0, = 0.9.6, = 0.11.2, = 0.9.9, < 0.12.1NVD