High severity7.5NVD Advisory· Published Aug 5, 2024· Updated Apr 15, 2026

CVE-2024-40530

Description

A vulnerability in Pantera CRM versions 401.152 and 402.072 allows unauthorized attackers to bypass IP-based access controls by manipulating the X-Forwarded-For header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rukovoditel/CRMllm-fuzzy
Range: 401.152, 402.072

Patches

Vulnerability mechanics

References

critical.lt/blog/authorization-bypass-and-mass-assignment-in-pantera-crm/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000