WS-2022-0353
Published:May 15, 2026
Updated:May 15, 2026
User can get details of the comments that were deleted in yetiforcecompany/yetiforcecrm.
When a user creates a new record he can add a comment on it. The user is also able to delete the comments after which the user wont be having access to that comment like replying, checking what the comment was. This vulnerability allows any user to see what the deleted comment was and also to reply on that comment.
Affected Packages
yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-snyk-fix-537207176593645ca3dfc7afa8d7bdd7 <dev-dependabot/npm_and_yarn/developer/gridstack-7.0.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/gridstack-7.0.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =2.3.0 <dev-dependabot/composer/developer/zbateson/mail-mime-parser-2.3.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/zbateson/mail-mime-parser-2.3.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/flag-icons-6.6.3 <dev-depfu/update/composer/phpmailer/phpmailer-6.6.3Fix Suggestion:
Update to version dev-depfu/update/composer/phpmailer/phpmailer-6.6.3yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/quasar-2.0.0 <dev-dependabot/npm_and_yarn/developer/select2-theme-bootstrap4-1.0.2Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/select2-theme-bootstrap4-1.0.2yetiforce/yetiforce-crm (PHP):
Affected version(s) >=2.3.16 <dev-depfu/update/composer/zbateson/mail-mime-parser-2.4.0Fix Suggestion:
Update to version dev-depfu/update/composer/zbateson/mail-mime-parser-2.4.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/sabre/dav-4.1.5 <dev-dependabot/npm_and_yarn/developer/flag-icon-css-4.1.6Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/flag-icon-css-4.1.6yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/illuminate/support-8.83.0 <dev-dependabot/composer/developer/illuminate/support-8.83.1Fix Suggestion:
Update to version dev-dependabot/composer/developer/illuminate/support-8.83.1yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/composer/developer/phpoffice/phpspreadsheet-1.23.0 <dev-depfu/update/composer/phpoffice/phpspreadsheet-1.24.0Fix Suggestion:
Update to version dev-depfu/update/composer/phpoffice/phpspreadsheet-1.24.0yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/split.js-1.6.4 <dev-depfu/update/yarn/datatables.net-1.11.1Fix Suggestion:
Update to version dev-depfu/update/yarn/datatables.net-1.11.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/fortawesome/fontawesome-free-6.1.2 <dev-dependabot/npm_and_yarn/developer/fullcalendar-6.1.4Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/fullcalendar-6.1.4yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/fullcalendar-5.10.2 <dev-dependabot/npm_and_yarn/developer/fullcalendar-5.11.0Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/fullcalendar-5.11.0yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/quasar-2.6.6 <dev-dependabot/npm_and_yarn/developer/quasar-2.7.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/quasar-2.7.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/illuminate/support-8.53.1 <dev-dependabot/composer/developer/illuminate/support-8.55.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/illuminate/support-8.55.0wyrihaximus/to-x-or-not-to-x (PHP):
Affected version(s) =dev-dependabot/add-v2-config-file <dev-dependabot/composer/cakephp/collection-4.1.6Fix Suggestion:
Update to version dev-dependabot/composer/cakephp/collection-4.1.6yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/gridstack-4.x <dev-renovate/smarty-smarty-4.xFix Suggestion:
Update to version dev-renovate/smarty-smarty-4.xyetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/clipboard-2.0.7 <dev-dependabot/npm_and_yarn/developer/clipboard-2.0.10Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/clipboard-2.0.10yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/gridstack-4.2.2 <dev-dependabot/composer/developer/globalcitizen/php-iban-4.2.3Fix Suggestion:
Update to version dev-dependabot/composer/developer/globalcitizen/php-iban-4.2.3yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/composer/ca-bundle-1.3.3 <dev-depfu/update/composer/composer/ca-bundle-1.3.3Fix Suggestion:
Update to version dev-depfu/update/composer/composer/ca-bundle-1.3.3yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/datatables.net-bs4-1.11.4 <dev-dependabot/npm_and_yarn/developer/datatables.net-bs4-1.13.0Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/datatables.net-bs4-1.13.0yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/composer/developer/maximebf/debugbar-1.16.4 <dev-dependabot/composer/developer/maximebf/debugbar-1.17.1Fix Suggestion:
Update to version dev-dependabot/composer/developer/maximebf/debugbar-1.17.1yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/abraham-twitteroauth-2.x <dev-renovate/floatthead-2.x-lockfileFix Suggestion:
Update to version dev-renovate/floatthead-2.x-lockfileyetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/gridstack-4.2.3 <dev-dependabot/npm_and_yarn/developer/gridstack-4.2.6Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/gridstack-4.2.6yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/html2canvas-1.0.0 <dev-dependabot/npm_and_yarn/developer/html2canvas-1.1.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/html2canvas-1.1.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/phpoffice/phpspreadsheet-1.17.1 <dev-dependabot/composer/developer/maximebf/debugbar-1.17.2Fix Suggestion:
Update to version dev-dependabot/composer/developer/maximebf/debugbar-1.17.2yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/fortawesome/fontawesome-free-5.15.2 <dev-dependabot/npm_and_yarn/developer/fortawesome/fontawesome-free-6.0.0Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/fortawesome/fontawesome-free-6.0.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/html2canvas-1.2.1 <dev-dependabot/npm_and_yarn/developer/html2canvas-1.3.3Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/html2canvas-1.3.3yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/phpmailer/phpmailer-6.5.1 <dev-dependabot/npm_and_yarn/developer/fortawesome/fontawesome-free-6.5.2Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/fortawesome/fontawesome-free-6.5.2yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-depfu/update/yarn/datatables.net-responsive-bs4-2.2.7 <dev-depfu/update/yarn/leaflet.markercluster-1.5.1Fix Suggestion:
Update to version dev-depfu/update/yarn/leaflet.markercluster-1.5.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/illuminate/support-8.63.0 <dev-dependabot/composer/developer/illuminate/support-8.64.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/illuminate/support-8.64.0yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/stephanebour-actions-php-security-checker-1.x <dev-renovate/zbateson-mail-mime-parser-1.x-lockfileFix Suggestion:
Update to version dev-renovate/zbateson-mail-mime-parser-1.x-lockfileyetiforce/yetiforce-crm (PHP):
Affected version(s) =6.2.0 <dev-dependabot/npm_and_yarn/developer/fortawesome/fontawesome-free-6.2.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/fortawesome/fontawesome-free-6.2.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =1.4.0 <dev-dependabot/composer/developer/composer/ca-bundle-1.5.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/composer/ca-bundle-1.5.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/mdi/font-5.9.55 <dev-dependabot/npm_and_yarn/developer/fullcalendar-5.10.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/fullcalendar-5.10.1yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/quasar-1.14.7 <dev-dependabot/composer/developer/phpoffice/phpspreadsheet-1.16.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/phpoffice/phpspreadsheet-1.16.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-renovate/vue-color-2.x-lockfile <dev-renovate/zbateson-mail-mime-parser-2.xFix Suggestion:
Update to version dev-renovate/zbateson-mail-mime-parser-2.xyetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/quasar-2.1.0 <dev-dependabot/npm_and_yarn/developer/quasar-2.1.5Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/quasar-2.1.5yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/composer/developer/illuminate/support-8.40.0 <dev-dependabot/composer/developer/illuminate/support-8.47.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/illuminate/support-8.47.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-depfu/batch_all/yarn/2022-04-11 <dev-depfu/batch_all/yarn/2022-05-23Fix Suggestion:
Update to version dev-depfu/batch_all/yarn/2022-05-23yetiforce/yetiforce-crm (PHP):
Affected version(s) =3.4.0 <dev-dependabot/composer/twig/twig-3.4.3Fix Suggestion:
Update to version dev-dependabot/composer/twig/twig-3.4.3yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/gridstack-5.x <dev-renovate/simshaun-recurr-5.xFix Suggestion:
Update to version dev-renovate/simshaun-recurr-5.xyetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/composer/developer/maximebf/debugbar-1.18.0 <dev-dependabot/composer/developer/maximebf/debugbar-1.18.1Fix Suggestion:
Update to version dev-dependabot/composer/developer/maximebf/debugbar-1.18.1yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/bootstrap-4.6.0 <dev-dependabot/npm_and_yarn/developer/bootstrap-4.6.2Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/bootstrap-4.6.2yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/composer/developer/smarty/smarty-4.0.3 <dev-dependabot/composer/developer/smarty/smarty-4.0.4Fix Suggestion:
Update to version dev-dependabot/composer/developer/smarty/smarty-4.0.4yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/flag-icons-6.6.2 <dev-dependabot/composer/developer/phpmailer/phpmailer-6.6.3Fix Suggestion:
Update to version dev-dependabot/composer/developer/phpmailer/phpmailer-6.6.3yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-depfu/update/yarn/html2canvas-1.0.0 <dev-depfu/update/yarn/html2canvas-1.1.3Fix Suggestion:
Update to version dev-depfu/update/yarn/html2canvas-1.1.3yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/composer/developer/giggsey/libphonenumber-for-php-8.12.47.1 <dev-dependabot/composer/developer/giggsey/libphonenumber-for-php-8.12.52Fix Suggestion:
Update to version dev-dependabot/composer/developer/giggsey/libphonenumber-for-php-8.12.52yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-snyk-fix-0ceb8d4c28055673180c836e832f25a0 <dev-snyk-fix-2efeedf570460d9a96a9e59408128f8aFix Suggestion:
Update to version dev-snyk-fix-2efeedf570460d9a96a9e59408128f8ayetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/quasar-2.0.1 <dev-dependabot/composer/developer/abraham/twitteroauth-2.0.2Fix Suggestion:
Update to version dev-dependabot/composer/developer/abraham/twitteroauth-2.0.2yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/datatables.net-1.10.24 <dev-dependabot/npm_and_yarn/developer/datatables.net-1.11.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/datatables.net-1.11.1yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/composer/developer/parsecsv/php-parsecsv-1.3.1 <dev-dependabot/composer/developer/zbateson/mail-mime-parser-1.3.2Fix Suggestion:
Update to version dev-dependabot/composer/developer/zbateson/mail-mime-parser-1.3.2yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/perfect-scrollbar-1.5.5 <dev-dependabot/composer/developer/chrome-php/chrome-1.7.1Fix Suggestion:
Update to version dev-dependabot/composer/developer/chrome-php/chrome-1.7.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =6.1.0 <dev-dependabot/npm_and_yarn/developer/fortawesome/fontawesome-free-6.1.0Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/fortawesome/fontawesome-free-6.1.0yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-depfu/update/yarn/inputmask-5.0.6 <dev-dependabot/npm_and_yarn/developer/gridstack-5.1.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/gridstack-5.1.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-renovate/leaflet.markercluster-1.x-lockfile <dev-renovate/major-vue-monorepoFix Suggestion:
Update to version dev-renovate/major-vue-monorepoyetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/giggsey/libphonenumber-for-php-8.12.43 <dev-depfu/update/composer/giggsey/libphonenumber-for-php-8.12.43Fix Suggestion:
Update to version dev-depfu/update/composer/giggsey/libphonenumber-for-php-8.12.43yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/adhocore/jwt-1.1.2 <dev-depfu/update/composer/yetiforce/csrf-magic-1.1.7Fix Suggestion:
Update to version dev-depfu/update/composer/yetiforce/csrf-magic-1.1.7yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/giggsey/libphonenumber-for-php-8.12.34 <dev-dependabot/composer/developer/giggsey/libphonenumber-for-php-8.12.35Fix Suggestion:
Update to version dev-dependabot/composer/developer/giggsey/libphonenumber-for-php-8.12.35yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/phpmailer/phpmailer-6.5.4 <dev-depfu/update/composer/phpmailer/phpmailer-6.5.4Fix Suggestion:
Update to version dev-depfu/update/composer/phpmailer/phpmailer-6.5.4yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/smarty-smarty-3.x-lockfile <dev-dependabot/composer/developer/abraham/twitteroauth-3.1.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/abraham/twitteroauth-3.1.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/chartjs-plugin-datalabels-1.0.0 <dev-paula-w-patch-1Fix Suggestion:
Update to version dev-paula-w-patch-1yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/adhocore-jwt-1.x-lockfile <dev-renovate/chrome-php-chrome-1.x-lockfileFix Suggestion:
Update to version dev-renovate/chrome-php-chrome-1.x-lockfileyetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-depfu/update/yarn/html2canvas-1.2.2 <dev-depfu/update/yarn/html2canvas-1.3.3Fix Suggestion:
Update to version dev-depfu/update/yarn/html2canvas-1.3.3yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/gridstack-4.2.0 <dev-depfu/update/composer/smarty/smarty-4.2.0Fix Suggestion:
Update to version dev-depfu/update/composer/smarty/smarty-4.2.0yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/gridstack-3.1.2 <dev-dependabot/composer/developer/smarty/smarty-3.1.40Fix Suggestion:
Update to version dev-dependabot/composer/developer/smarty/smarty-3.1.40yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/fullcalendar-5.5.0 <dev-dependabot/npm_and_yarn/developer/fullcalendar-5.9.0Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/fullcalendar-5.9.0yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/emoji-mart-vue-fast-9.x <dev-renovate/blueimp-file-upload-10.x-lockfileFix Suggestion:
Update to version dev-renovate/blueimp-file-upload-10.x-lockfileyetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-depfu/update/composer/league/climate-3.8.2 <dev-dependabot/composer/developer/twig/twig-3.10.3Fix Suggestion:
Update to version dev-dependabot/composer/developer/twig/twig-3.10.3yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-depfu/batch_all/yarn/2022-01-03 <dev-depfu/batch_all/yarn/2022-04-04Fix Suggestion:
Update to version dev-depfu/batch_all/yarn/2022-04-04yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-depfu/update/composer/smarty/smarty-4.1.0 <dev-dependabot/composer/developer/webklex/php-imap-4.1.1Fix Suggestion:
Update to version dev-dependabot/composer/developer/webklex/php-imap-4.1.1yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-depfu/update/composer/smarty/smarty-4.0.4 <dev-dependabot/composer/developer/smarty/smarty-4.1.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/smarty/smarty-4.1.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/quasar-2.5.0 <dev-dependabot/npm_and_yarn/developer/quasar-2.5.3Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/quasar-2.5.3yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/fullcalendar-5.4.0 <dev-dependabot/composer/developer/symfony/filesystem-5.4.5Fix Suggestion:
Update to version dev-dependabot/composer/developer/symfony/filesystem-5.4.5yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/gridstack-4.0.1 <dev-dependabot/npm_and_yarn/public_html/src/developer/vuex-4.0.2Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/public_html/src/developer/vuex-4.0.2yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/composer/developer/ezyang/htmlpurifier-4.14.0 <dev-dependabot/composer/developer/ezyang/htmlpurifier-4.16.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/ezyang/htmlpurifier-4.16.0yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/overlayscrollbars-1.x-lockfile <dev-renovate/quasar-1.x-lockfileFix Suggestion:
Update to version dev-renovate/quasar-1.x-lockfileyetiforce/yetiforce-crm (PHP):
Affected version(s) =1.1.0 <dev-dependabot/composer/developer/adhocore/jwt-1.1.1Fix Suggestion:
Update to version dev-dependabot/composer/developer/adhocore/jwt-1.1.1yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/composer/developer/nette/php-generator-3.5.2 <dev-dependabot/composer/developer/nette/php-generator-3.6.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/nette/php-generator-3.6.0yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/gridstack-5.0.0 <dev-renovate/fullcalendar-5.xFix Suggestion:
Update to version dev-renovate/fullcalendar-5.xyetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/jquery-hoverintent-1.10.2 <dev-dependabot/npm_and_yarn/developer/overlayscrollbars-1.13.3Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/overlayscrollbars-1.13.3yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/public_html/src/developer/vue-color-2.8.0 <dev-dependabot/npm_and_yarn/developer/overlayscrollbars-2.8.3Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/overlayscrollbars-2.8.3yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/sonata-project/google-authenticator-2.3.1 <dev-dependabot/npm_and_yarn/developer/quasar-2.3.3Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/quasar-2.3.3yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/mlocati/spf-lib-3.1.1 <dev-dependabot/composer/developer/mlocati/spf-lib-3.1.2Fix Suggestion:
Update to version dev-dependabot/composer/developer/mlocati/spf-lib-3.1.2yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/vue-monorepo <dev-renovate/char0n-swagger-editor-validate-1.xFix Suggestion:
Update to version dev-renovate/char0n-swagger-editor-validate-1.xyetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/ckeditor/ckeditor-4.17.2 <dev-dependabot/composer/developer/ckeditor/ckeditor-4.20.1Fix Suggestion:
Update to version dev-dependabot/composer/developer/ckeditor/ckeditor-4.20.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/giggsey/libphonenumber-for-php-8.12.45 <dev-depfu/update/composer/giggsey/libphonenumber-for-php-8.12.47Fix Suggestion:
Update to version dev-depfu/update/composer/giggsey/libphonenumber-for-php-8.12.47yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/datatables.net-1.x-lockfile <dev-renovate/github-codeql-action-digestFix Suggestion:
Update to version dev-renovate/github-codeql-action-digestyetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-renovate/phpmailer-phpmailer-6.x-lockfile <dev-dependabot/npm_and_yarn/developer/fullcalendar-6.0.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/fullcalendar-6.0.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-snyk-fix-c5905f419b49154bcef766373f12a6bb <dev-dependabot/npm_and_yarn/developer/overlayscrollbars-2.0.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/overlayscrollbars-2.0.1yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/composer/developer/illuminate/support-8.48.2 <dev-dependabot/composer/developer/illuminate/support-8.49.2Fix Suggestion:
Update to version dev-dependabot/composer/developer/illuminate/support-8.49.2yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-depfu/update/yarn/split.js-1.6.4 <dev-developerFix Suggestion:
Update to version dev-developeryetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/league-climate-3.x-lockfile <dev-renovate/paambaati-codeclimate-action-3.xFix Suggestion:
Update to version dev-renovate/paambaati-codeclimate-action-3.xyetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/quasar-2.5.5 <dev-dependabot/composer/developer/setasign/fpdi-2.6.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/setasign/fpdi-2.6.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =4.0.0 <dev-dependabot/composer/developer/smarty/smarty-4.0.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/smarty/smarty-4.0.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-renovate/html2canvas-1.x-lockfile <dev-renovate/notihnio-php-multipart-form-data-parser-2.x-lockfileFix Suggestion:
Update to version dev-renovate/notihnio-php-multipart-form-data-parser-2.x-lockfileyetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/jquery-3.6.0 <dev-depfu/update/composer/twig/twig-3.6.0Fix Suggestion:
Update to version dev-depfu/update/composer/twig/twig-3.6.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/giggsey/libphonenumber-for-php-8.12.44 <dev-depfu/update/composer/giggsey/libphonenumber-for-php-8.12.44Fix Suggestion:
Update to version dev-depfu/update/composer/giggsey/libphonenumber-for-php-8.12.44yetiforce/yetiforce-crm (PHP):
Affected version(s) >=5.2.0 <dev-depfu/update/composer/webklex/php-imap-5.3.0Fix Suggestion:
Update to version dev-depfu/update/composer/webklex/php-imap-5.3.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/nette/php-generator-3.6.6 <dev-dependabot/composer/developer/nette/php-generator-3.6.7Fix Suggestion:
Update to version dev-dependabot/composer/developer/nette/php-generator-3.6.7yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/datatables.net-bs4-1.10.24 <dev-dependabot/npm_and_yarn/developer/datatables.net-bs4-1.11.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/datatables.net-bs4-1.11.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/gridstack-4.2.1 <dev-depfu/update/composer/sabre/dav-4.2.1Fix Suggestion:
Update to version dev-depfu/update/composer/sabre/dav-4.2.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/leaflet.markercluster-1.5.0 <dev-dependabot/npm_and_yarn/developer/leaflet.markercluster-1.5.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/leaflet.markercluster-1.5.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =5.0.0 <dev-dependabot/composer/developer/simshaun/recurr-5.0.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/simshaun/recurr-5.0.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/ckeditor/ckeditor-4.16.1 <dev-dependabot/composer/developer/ezyang/htmlpurifier-4.17.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/ezyang/htmlpurifier-4.17.0yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/quasar-2.7.3 <dev-dependabot/npm_and_yarn/developer/quasar-2.7.6Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/quasar-2.7.6roave/you-are-using-it-wrong (PHP):
Affected version(s) =dev-dependabot/add-v2-config-file <dev-dependabot/composer/composer/composer-2.0.8Fix Suggestion:
Update to version dev-dependabot/composer/composer/composer-2.0.8yetiforce/yetiforce-crm (PHP):
Affected version(s) =4.2.0 <dev-dependabot/composer/developer/smarty/smarty-4.2.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/smarty/smarty-4.2.0yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-depfu/update/yarn/moment-2.29.4 <dev-dependabot/npm_and_yarn/developer/gridstack-3.0.0Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/gridstack-3.0.0yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/bootstrap-4.x-lockfile <dev-renovate/ezyang-htmlpurifier-4.x-lockfileFix Suggestion:
Update to version dev-renovate/ezyang-htmlpurifier-4.x-lockfileyetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/composer/developer/twig/twig-3.3.10 <dev-dependabot/npm_and_yarn/developer/jstree-3.3.12Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/jstree-3.3.12yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-quasar-gui <dev-renovate/chart.js-4.xFix Suggestion:
Update to version dev-renovate/chart.js-4.xyetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-depfu/update/yarn/jquery-3.6.0 <dev-depfu/update/yarn/whatwg-fetch-3.6.0Fix Suggestion:
Update to version dev-depfu/update/yarn/whatwg-fetch-3.6.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =1.3.0 <dev-dependabot/composer/developer/parsecsv/php-parsecsv-1.3.0Fix Suggestion:
Update to version dev-dependabot/composer/developer/parsecsv/php-parsecsv-1.3.0yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-renovate/emoji-mart-vue-fast-8.x <dev-renovate/giggsey-libphonenumber-for-php-8.x-lockfileFix Suggestion:
Update to version dev-renovate/giggsey-libphonenumber-for-php-8.x-lockfileyetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-snyk-fix-69ac2376bc2f4d76c975c8e847831a03 <dev-snyk-fix-176bd4a5c5168482b4b7143af5062ad2Fix Suggestion:
Update to version dev-snyk-fix-176bd4a5c5168482b4b7143af5062ad2yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-renovate/maximebf-debugbar-1.x-lockfile <dev-renovate/ossf-scorecard-action-1.xFix Suggestion:
Update to version dev-renovate/ossf-scorecard-action-1.xyetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/html2canvas-1.4.0 <dev-dependabot/npm_and_yarn/developer/html2canvas-1.4.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/html2canvas-1.4.1yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/datatables.net-1.11.4 <dev-dependabot/npm_and_yarn/developer/datatables.net-1.11.5Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/datatables.net-1.11.5yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/composer/developer/giggsey/libphonenumber-for-php-8.12.29 <dev-dependabot/composer/developer/giggsey/libphonenumber-for-php-8.12.30Fix Suggestion:
Update to version dev-dependabot/composer/developer/giggsey/libphonenumber-for-php-8.12.30yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/moment-2.29.4 <dev-dependabot/npm_and_yarn/moment-2.29.4Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/moment-2.29.4yetiforce/yetiforce-crm (PHP):
Affected version(s) =2.2.0 <dev-dependabot/npm_and_yarn/developer/floatthead-2.2.3Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/floatthead-2.2.3yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-depfu/update/yarn/datatables.net-bs4-1.10.23 <dev-depfu/update/yarn/datatables.net-bs4-1.11.1Fix Suggestion:
Update to version dev-depfu/update/yarn/datatables.net-bs4-1.11.1yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/docker-github-super-linter-3.x <dev-renovate/league-climate-3.xFix Suggestion:
Update to version dev-renovate/league-climate-3.xyetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/perfect-scrollbar-1.5.1 <dev-dependabot/npm_and_yarn/developer/perfect-scrollbar-1.5.2Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/perfect-scrollbar-1.5.2yetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-dependabot/npm_and_yarn/developer/chart.js-and-chartjs-plugin-datalabels-3.7.0 <dev-dependabot/npm_and_yarn/developer/chart.js-and-chartjs-plugin-datalabels-3.7.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/chart.js-and-chartjs-plugin-datalabels-3.7.1yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/developer/quasar-2.4.2 <dev-dependabot/npm_and_yarn/developer/quasar-2.4.7Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/developer/quasar-2.4.7yetiforce/yetiforce-crm (PHP):
Affected version(s) >=dev-renovate/overtrue-phplint-2.x <dev-renovate/umutphp-php-var-dump-check-action-2.xFix Suggestion:
Update to version dev-renovate/umutphp-php-var-dump-check-action-2.xyetiforce/yetiforce-crm (PHP):
Affected version(s) =dev-depfu/batch_all/yarn/2022-08-22 <dev-snyk-fix-53ecab9f4abb900802a63b320f14595bFix Suggestion:
Update to version dev-snyk-fix-53ecab9f4abb900802a63b320f14595bRelated Resources (1)
Do you need more information?
Contact UsCVSS v4
Base Score:
7.1
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
NONE
Vulnerable System Availability
NONE
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE