N/A

The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation. By sending empty username and password parameters in the login request, an attacker can gain unauthorized access to user accounts, including administrative accounts, without providing valid credentials.

N/A

N/A

Perfex CRM 安全漏洞

Perfex CRM是Perfex CRM开源的一款客户关系管理软件。用于在云中管理客户、项目和创建发票。 Perfex CRM 3.3.1之前版本存在安全漏洞，该漏洞源于服务器端验证不足，可能导致绕过登录凭据，未经授权访问用户账户。

N/A

N/A