{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.3.0"}],"component":"yetiforce/yetiforce-crm","cve_ids":["CVE-2021-4117"],"ecosystem":"Packagist","epss":0.00731,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cxg7-84wp-8pcq","id":"tcs_01M5KF1AE9B4DV57R62GMFB9ZF","modified_at":"2023-11-08T04:06:53.464491Z","published_at":"2021-12-16T21:01:07Z","references":["https://osv.dev/vulnerability/GHSA-cxg7-84wp-8pcq","https://nvd.nist.gov/vuln/detail/CVE-2021-4117","https://github.com/yetiforcecompany/yetiforcecrm/commit/8dccd93442725f245b4b71986bbe6f4f48639239","https://github.com/yetiforcecompany/yetiforcecrm","https://huntr.dev/bounties/0b81e572-bdc9-4caf-aa02-81f3c7ad7c0a"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-cxg7-84wp-8pcq","url":"https://osv.dev/vulnerability/GHSA-cxg7-84wp-8pcq"}],"summary":"YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product"}