Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:krayin:crm:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Authentication Bypass in Krayin CRM Inbound Parse Endpoint

An authentication bypass vulnerability in Krayin CRM version 2.2.6 and earlier allows unauthenticated attackers to inject arbitrary, forged email messages into the CRM inbox via the /admin/mail/inbound-parse endpoint.

Krayin CRM web-application authentication-bypass crm
1r 1t
critical advisory

Krayin CRM Installer Authentication Bypass Vulnerability

Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware, allowing unauthenticated remote attackers to overwrite the administrator account via crafted HTTP POST requests.

PoC Krayin CRM vulnerability crm authentication-bypass
1r 1t 1c updated