What’s Vulnerable › Vulnerabilities

CVE-2021-4111: Business Logic Errors in yetiforcecompany/yetiforcecrm

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-12-15 · updated 2026-06-17
• Weakness: CWE-840

Description

yetiforcecrm is vulnerable to Business Logic Errors

Affected products

• Yetiforce Customer Relationship Management: through 6.3.0

References

• https://github.com/yetiforcecompany/yetiforcecrm/commit/c1ad7111a090adfcd5898af40724907adc987acf
• https://huntr.dev/bounties/8afc8981-baff-4082-b640-be535b29eb9a
• https://github.com/yetiforcecompany/yetiforcecrm/commit/c1ad7111a090adfcd5898af40724907adc987acf
• https://huntr.dev/bounties/8afc8981-baff-4082-b640-be535b29eb9a

Get alerted when CVE-2021-4111 or the next vulnerability affects your stack