Vulnerabilidades em krayin
20 resultadosAnálise Vexday
Krayin apresenta baixa exposição com apenas 2 CVEs no histórico e nenhuma sob ataque ativo no momento. A vulnerabilidade mais recente (últimos 90 dias) relaciona-se a problemas de autorização (CWE-639), sem severidade crítica registrada, indicando risco controlado no curto prazo.
CVE-2026-41452CRITICALKrayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setupEPSS 3.7%CVE-2026-100885MEDIUMKrayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorizationEPSS 1.4%CVE-2026-90944HIGHKrayin CRM through 2.2.6 Unauthenticated Email Injection via inbound-parseEPSS 0.7%CVE-2026-61460HIGHKrayin CRM Insecure Direct Object Reference via ControllersEPSS 0.5%CVE-2026-41453HIGHKrayin CRM < 2.2.4 Blind SQL Injection via LeadDataGrid.php rotten_lead ParameterEPSS 0.5%CVE-2026-100884MEDIUMKrayin laravel-crm attachment-download Endpoint acl.php resource injectionEPSS 0.3%CVE-2026-97897MEDIUMKrayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scriptingEPSS 0.3%CVE-2026-100883MEDIUMKrayin laravel-crm acl.php access controlEPSS 0.3%CVE-2026-97895MEDIUMkrayin laravel-crm User Management UserController.php privileges managementEPSS 0.3%CVE-2026-125374MEDIUMKrayin CRM before 2.2.8 Broken Object Level Authorization via Lead Tag Attach/DetachEPSS 0.3%CVE-2026-100882MEDIUMKrayin laravel-crm Admin Settings Endpoint index.blade.php cross site scriptingEPSS 0.3%CVE-2026-112286HIGHKrayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products EndpointsEPSS 0.3%CVE-2026-97896MEDIUMkrayin laravel-crm Upload Functionality ConfigurationForm.php rules cross site scriptingEPSS 0.2%CVE-2026-112288LOWKrayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS RebindingEPSS 0.2%CVE-2026-5370MEDIUMkrayin laravel-crm Activities Module/Notes inbox.spec.ts composeMail cross site scriptingEPSS 0.2%CVE-2026-112287HIGHKrayin CRM before 2.2.7 Broken Object Level Authorization in Mail ModuleEPSS 0.2%CVE-2026-48543MEDIUMKrayin CRM 2.2.6 Stored Template Injection XSS via Web Form DescriptionEPSS 0.2%CVE-2026-48542MEDIUMKrayin CRM 2.2.6 Stored Template Injection XSS via Product Name FieldEPSS 0.2%CVE-2026-48540MEDIUMKrayin CRM 2.2.6 Stored Template Injection XSS via Lead TitleEPSS 0.2%CVE-2026-48541MEDIUMKrayin CRM 2.2.6 Stored Template Injection XSS via Contact Name FieldEPSS 0.1%