CyberRota Analysis
AI-GeneratedThe CodeCanyon TimeCamp Integration for CRM versions up to 2.8 is vulnerable due to an authorization bypass issue in the Contact Information Update component, specifically in the /clients/save_contact file. This flaw allows remote attackers to manipulate the contact_id argument, potentially leading to unauthorized access to sensitive information. Organizations using this integration should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save_contact of the component Contact Information Update. Such manipulation of the argument contact_id leads to authorization bypass. The attack can be launched remotely. The exploit is publicly available and might be used.