Bottelet vulnerabilities
We track 3 vulnerabilities in Bottelet products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 13, 2022.
Latest Bottelet vulnerabilities
- 8.8 High severity
In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session…
In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even aft
- 8.8 High severity
DaybydayCRM: Missing Authorization
In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has update user permission enabled is able to change the password of other users, including the administrator’s. This allows the attacker to gain
- 7.5 High severity
DaybydayCRM: Weak Password Requirements
In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality. A user with privileges to update his password could change it to a weak password, such as those with a length of a single character. This may allow