XML Serialization Vulnerability in Fat Free CRM by Fat Free CRM
CVE-2013-7249

Currently unrated

Key Information:

Vendor

Fatfreecrm

Status
Fat Free Crm
Vendor
CVE Published:
2 January 2014

What is CVE-2013-7249?

Fat Free CRM versions prior to 0.12.1 are susceptible to an XML serialization vulnerability that allows attackers to gain unauthorized access to sensitive information. By leveraging direct requests, attackers can obtain data in an XML format, such as user details or configuration information. This flaw underscores the importance of implementing strict access controls and validating serialization processes to enhance application security.

References

http://seclists.org/fulldisclosure/2013/Dec/199
mailing-listx_refsource_FULLDISC
http://openwall.com/lists/oss-security/2013/12/28/2
mailing-listx_refsource_MLIST
http://www.phenoelit.org/stuff/ffcrm.txt
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.