Mitchell_45

**Name of the Vulnerable Software and Affected Versions** Bottelet DaybydayCRM versions prior to 2.2.2 **Description** An issue exists within the Setting Handler component where a manipulation of an unknown function allows for missing authentication. This flaw enables remote exploitation of the system. **Recommendations** Apply the available patch for versions prior to 2.2.2.

**Name of the Vulnerable Software and Affected Versions** DevaslanPHP project-management versions prior to 2.0.0-beta1 **Description** An improper authorization issue exists in the Ticket Handler component. A remote attacker can exploit this by manipulating the `recordUpdated()` function within the `app/Helpers/KanbanScrumHelper.php` file. **Recommendations** As a temporary workaround, restrict access to the `recordUpdated()` function in the `app/Helpers/KanbanScrumHelper.php` file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.