https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T07:52:07.071081+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-39281 CVE-2022-39281 — Remote Denial of Service via Tasks endpoint in fat_free_crm 2026-10-23T07:52:07.104381+00:00

Affected: fatfreecrm fat_free_crm

fat_free_crm is a an open source, Ruby on Rails customer relationship management platform (CRM). In versions prior to 0.20.1 an authenticated user can perform a remote Denial of Service attack against Fat Free CRM via bucket access. The vulnerability has been patched in commit `c85a254` and will be available in release `0.20.1`. Users are advised to upgrade or to manually apply patch `c85a254`. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/gsd-2022-39281 gsd-2022-39281 2026-10-23T07:52:07.104466+00:00 gsd-2022-39281