https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T11:20:28.446739+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-39198 CVE-2021-39198 — The disqualify lead action may be executed without CSRF token check 2026-10-16T11:20:28.447926+00:00

Affected: oroinc crm

OroCRM is an open source Client Relationship Management (CRM) application. Affected versions we found to suffer from a vulnerability which could an attacker is able to disqualify any Lead with a Cross-Site Request Forgery (CSRF) attack. There are no workarounds that address this vulnerability and all users are advised to update their package.