Threats tagged 'ghsa-jqqg-v7qj-c3jq'

A vulnerability in CodeCanyon Perfex CRM up to version 3.4.1 allows remote attackers to bypass authorization via manipulation of the ID argument in the Clients::project function. This flaw affects the Tenant Handler component and has a CVSS 3.1 base score of 6.3, indicating a medium severity. Public exploit code is available, but no official patch or remediation details have been provided yet.