← Back

1crm

Vendor: 1crm • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-15958
11crm
11crm
Jun 17, 2026
Sep 18, 2020
N/A· v4
8.6 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a...Show more
An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a predictable URL.Show less