https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T05:06:00.379051+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-109102 EUVD-2026-109102 2026-10-24T05:06:00.454912+00:00 EUVD-2026-109102 https://cve.radiocsirt.org/vuln/fkie_cve-2013-7223 fkie_cve-2013-7223 2026-10-24T05:06:00.454975+00:00

Multiple cross-site request forgery (CSRF) vulnerabilities in Fat Free CRM before 0.12.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to the lack of a protect_from_forgery line in app/controllers/application_controller.rb.

 https://cve.radiocsirt.org/vuln/ghsa-mcvq-7xjq-46x6 GHSA-mcvq-7xjq-46x6 — Fat Free CRM contains Cross-site Request Forgery vulnerablilities 2026-10-24T05:06:00.455022+00:00

Affected: RubyGems: fat_free_crm

Multiple cross-site request forgery (CSRF) vulnerabilities in Fat Free CRM before 0.12.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to the lack of a `protect_from_forgery` line in `app/controllers/application_controller.rb`.

 https://cve.radiocsirt.org/vuln/gsd-2013-7223 gsd-2013-7223 2026-10-24T05:06:00.455047+00:00 gsd-2013-7223