Approved changes feed: RSS · Atom

cpe:2.3:a:uab_lexita:panteracrm_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUab Lexita (d149e6e2-039e-5fd8-9f7b-59fc1f2079d4)
ProductPanteracrm Cms (177f71fb-73b2-50cd-b553-3a9d4329aa6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-40531 vulnerable 2026-06-08 06:43:52.350049 Details available
A mass assignment vulnerability exists in Pantera CRM versions 401.152 and 402.072. This flaw allows authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions.
Published: 2024-08-05T00:00:00.000Z
Updated: 2025-03-14T18:11:11.708Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40530 vulnerable 2026-06-08 06:43:52.349554 Details available
A vulnerability in Pantera CRM versions 401.152 and 402.072 allows unauthorized attackers to bypass IP-based access controls by manipulating the X-Forwarded-For header.
Published: 2024-08-05T00:00:00.000Z
Updated: 2025-03-24T15:53:39.703Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.