CyberRota Analysis
AI-GeneratedA vulnerability in ChangeWeDer CRM allows for improper authentication through the function responsible for releasing user IDs from cookies, potentially enabling remote attackers to exploit this weakness. Organizations using this CRM should prioritize addressing this issue, as it poses a significant risk to user account security and could lead to unauthorized access. Given the continuous delivery model of the product, immediate action is necessary to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects the function top.upstudy.crm.utils.LoginUserUtil.releaseUserIdFromCookie. The manipulation leads to improper authentication. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.