https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T23:53:58.659352+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-08153 cnvd-2022-08153 2026-10-17T23:53:58.662555+00:00 cnvd-2022-08153 https://cve.radiocsirt.org/vuln/euvd-2026-10937 EUVD-2026-10937 2026-10-17T23:53:58.662587+00:00 EUVD-2026-10937 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0269 fkie_cve-2022-0269 2026-10-17T23:53:58.662602+00:00

Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.

 https://cve.radiocsirt.org/vuln/ghsa-7g7r-gr46-q4p5 GHSA-7g7r-gr46-q4p5 — Cross-Site Request Forgery in yetiforce 2026-10-17T23:53:58.662629+00:00

Affected: Packagist: yetiforce/yetiforce-crm

Versions of yetiforce 6.3.0 and prior are subject to privilege escalation via a cross site request forgery bug. This allows an attacker to create a new admin account even with SameSite: Strict enabled. This vulnerability can be exploited by any user on the system including guest users.

 https://cve.radiocsirt.org/vuln/gsd-2022-0269 gsd-2022-0269 2026-10-17T23:53:58.662652+00:00 gsd-2022-0269