{"action":"Upgrade fat_free_crm to 0.13.6 or later.","affected":[{"fixed":"0.13.6","introduced":"0"}],"component":"fat_free_crm","cve_ids":["CVE-2015-1585"],"ecosystem":"RubyGems","epss":0.01094,"exploited":false,"fixed_versions":["0.13.6"],"ghsa_id":"GHSA-wx7c-8j35-mpg8","id":"tcs_01M5KEP2G15TRQ0PRPQ8DXPV5P","modified_at":"2024-12-06T05:39:31.251257Z","published_at":"2022-05-14T02:49:30Z","references":["https://osv.dev/vulnerability/GHSA-wx7c-8j35-mpg8","https://nvd.nist.gov/vuln/detail/CVE-2015-1585","https://github.com/fatfreecrm/fat_free_crm/commit/86fd7f98c9583fd36384987282d1c086fdcecd7c","https://exchange.xforce.ibmcloud.com/vulnerabilities/100925","https://github.com/fatfreecrm/fat_free_crm","https://github.com/fatfreecrm/fat_free_crm/wiki/CSRF-Vulnerability-%28CVE-2015-1585%29","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/fat_free_crm/CVE-2015-1585.yml","http://packetstormsecurity.com/files/130410/Fat-Free-CRM-0.13.5-Cross-Site-Request-Forgery.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-wx7c-8j35-mpg8","url":"https://osv.dev/vulnerability/GHSA-wx7c-8j35-mpg8"}],"summary":"Fat Free CRM Cross-Site Request Forgery vulnerability"}