Skip to content
Threat Feed
Subscribe

Product

Krayin CRM (<= 2.2.6)

1 brief RSS
high advisory

Authentication Bypass in Krayin CRM Inbound Parse Endpoint

An authentication bypass vulnerability in Krayin CRM version 2.2.6 and earlier allows unauthenticated attackers to inject arbitrary, forged email messages into the CRM inbox via the /admin/mail/inbound-parse endpoint.

Krayin CRM web-application authentication-bypass crm
1r 1t