ChangeWeDer crm vulnerabilities

A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd affecting unknown code in src/main/resources/public/js/customerServe/customer.serve.js (Save Endpoint component). Manipulation of the customerName argument causes cross-site scripting, and remote exploitation is possible. The exploit has been publicly disclosed and may be utilized.

A security flaw has been discovered in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This issue affects the index function of the file UserController.java of the component top.upstudy.crm.controller.UserController. The manipulation results in missing authorization. The attack can be launched remotely. This product does not use versioning, so information about affected and unaffected releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was identified in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd, affecting top.upstudy.crm.utils.LoginUserUtil.releaseUserIdFromCookie, leading to improper authentication. The attack can be initiated remotely, and the project has not responded to the issue report.