PT-2024-10380 · Amocrm · Amocrm

Published

2024-10-15

·

Updated

2024-10-15

CVSS v2.0

8.5

High

VectorAV:N/AC:L/Au:N/C:C/I:N/A:P
Name of the Vulnerable Software and Affected Versions amoCRM (affected versions not specified)
Description The issue is related to the lack of protection of the web page structure in amoCRM, a cloud-based customer relationship management system. This could allow a remote attacker to conduct cross-site scripting (XSS) attacks.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-00888

Affected Products

Amocrm