Threats tagged 'ghsa-4vcj-8cj2-68x6'

A weakness in YunaiV yudao-cloud up to version 2025.09 allows remote attackers to manipulate the arguments ids and newOwnerUserId in the /crm/business/transfer file, leading to improper authorization. This vulnerability has a medium severity score of 6.3 and has publicly available exploit code. The vendor has not responded to disclosure and no patch information is available.