panteracrm_cms vulnerabilities

2 known vulnerabilities in panteracrm_cms from Uab Lexita. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  panteracrm_cms: Improper Access Control

  CVE-2024-40531Aug 5, 2024Uab Lexita

  A mass assignment vulnerability exists in Pantera CRM versions 401.152 and 402.072. This flaw allows authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions.

• 7.5 High severity

  panteracrm_cms: Incorrect Authorization

  CVE-2024-40530Aug 5, 2024Uab Lexita

  A vulnerability in Pantera CRM versions 401.152 and 402.072 allows unauthorized attackers to bypass IP-based access controls by manipulating the X-Forwarded-For header.