https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T09:05:47.185138+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-112286 fkie_cve-2026-112286 2026-10-20T09:05:47.186525+00:00

Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve quote addresses, totals, contact details, and product pricing belonging to any user or lead.

 https://db.gcve.eu/vuln/ghsa-fppf-7fvr-hr9c GHSA-fppf-7fvr-hr9c 2026-10-20T09:05:47.186615+00:00

Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve quote addresses, totals, contact details, and product pricing belonging to any user or lead.