Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

YosemiteCRM Authorization Bypass (GHSA-256m-qy6y-4274) IDOR & Cross-Tenant Data Exposure

github.com 2026-10-29 English translation pending; showing Chinese 查看中文 →
Security Advisory GHSA-256m-qy6y-4274 Critical YosemiteCrew
Affected:
  • YosemiteCRM v1.12.0 to v1.76.0
  • YosemiteCRM v2.0.0 to v2.11.0
  • YosemiteCRM v3.0.0 to v3.11.0
  • YosemiteCRM v4.0.0 to v4.11.0
  • YosemiteCRM v5.0.0 to v5.11.0
Referenced CVEs: CVE-2026-59979 · 8.3
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
Apache Log4j2 Log4Shell (CVE-2021-44228) RCE Advisory: Analysis, Mitigation, and POC 2026-10-29 Glimmer File Inclusion & Path Traversal Fix and POC 2026-10-29 Doomstick udevices Secondary Path Code Execution via Lua (CVE-2022-37020) Analysis & Fix 2026-10-29 MailWizz IDOR Vulnerability: Unauth Tenant Email Release/Delete with Fix 2026-10-29 Apache OpenNMS CVE-2021-40666: SNMP RCE Vulnerability Analysis and POC 2026-10-29
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro