GHSA-gmg5-r3c4-3fm9

Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-gmg5-r3c4-3fm9/GHSA-gmg5-r3c4-3fm9.json
Aliases
  • CVE-2019-10226
Published
2022-05-24T16:47:42Z
Modified
2023-03-18T05:48:08.197857Z
Details

HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to the /comments URI.

References

Affected packages

RubyGems / fat_free_crm

fat_free_crm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0

Affected versions

0.*

0.11.0
0.11.1
0.11.2
0.11.3
0.11.4
0.12.0
0.12.1
0.12.2
0.12.3
0.13.0
0.13.1
0.13.2
0.13.3
0.13.4
0.13.5
0.13.6
0.14.0
0.14.1
0.14.2
0.15.0
0.15.0.beta
0.15.0.beta.2
0.15.1
0.15.2
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.17.1
0.17.2
0.17.3
0.18.0
0.18.1
0.18.2
0.19.0
0.19.2
0.20.0
0.20.1

Database specific 

{
    "last_known_affected_version_range": "<= 0.19.0"
}