Cpe:2.3:a:krayin:krayin_crm:*:*:*:*:*:*:*:*

Krayin CRM versions before 2.2.7 contain a broken object level authorization vulnerability in the EmailController, allowing authenticated users to manipulate or delete emails belonging to other users.