PT-2023-23727 · Zhong Bang · Crmeb

P0Ison

·

CVE-2023-3232

·

Publicado

2023-06-14

·

Atualizado

2024-05-17

CVSS v3.1

6.3

Média

VetorAV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Zhong Bang CRMEB versions up to 4.6.0
Description A critical issue affects the Image Upload component, specifically the file /api/wechat/app auth, leading to deserialization due to some unknown processing.
Recommendations For versions up to 4.6.0, as a temporary workaround, consider restricting access to the /api/wechat/app auth API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Deserialization of Untrusted Data

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2023-3232

Produtos afetados

Crmeb