« Volver al listado

Krayin

Krayin Laravel-crm: vulnerabilidades y CVE

Krayin Laravel-crm tiene 4 vulnerabilidades publicadas, 4 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE4
Últimos 12 meses4
Críticas0
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-100885Media (5.5)1.00%—27 sept 2026
A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the file packages/Webkul/Installer/src/Http/Middleware/CanInstall.php of the component admin-config-setup API Endpoint.…
CVE-2026-97897Media (5.1)0.24%—25 sept 2026
A security flaw has been discovered in Krayin laravel-crm up to 2.2.5. This issue affects some unknown processing of the file Sanitizer.php of the component TinyMCE Media Upload. The manipulation results in cross site…
CVE-2026-97895Baja (2.1)0.27%—25 sept 2026
A vulnerability was determined in krayin laravel-crm up to 2.2.5. This affects an unknown part of the file packages/Webkul/Admin/src/Http/Controllers/Settings/UserController.php of the component User Management.…
CVE-2026-5370Baja (2)0.36%—2 abr 2026
A vulnerability was identified in krayin laravel-crm up to 2.2. Impacted is the function composeMail of the file packages/Webkul/Admin/tests/e2e-pw/tests/mail/inbox.spec.ts of the component Activities Module/Notes…

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1059.007 JavaScript1
  2. T1078.001 Default Accounts1
  3. T1098.002 Additional Email Delegate Permissions1
  4. T1189 Drive-by Compromise1
  5. T1190 Exploit Public-Facing Application1
  6. T1210 Exploitation of Remote Services1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Krayin