Threats tagged 'ghsa-7v2x-2f52-8cpm'

CordysCRM versions up to 1.9.3 contain an authorization bypass vulnerability that allows low-privileged authenticated users to bypass permission checks by manipulating the owner field. This enables attackers to add or modify follow-up records on customers, clues, or opportunities via specific endpoints.