PT-2023-32535 · Suitecrm · Suitecrm

CVE-2023-6130

·

Publicado

2023-11-14

·

Atualizado

2024-03-06

CVSS v3.1

7.5

Alta

VetorAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SuiteCRM versions prior to 7.12.14 SuiteCRM versions prior to 7.14.2 SuiteCRM versions prior to 8.4.2
Description The issue concerns a path traversal vulnerability, where the sequence '..filename' can be used to access files outside the intended directory. This could potentially allow unauthorized access to sensitive information.
Recommendations For versions prior to 7.12.14, update to version 7.12.14 or later. For versions prior to 7.14.2, update to version 7.14.2 or later. For versions prior to 8.4.2, update to version 8.4.2 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BIT-SUITECRM-2023-6130
CVE-2023-6130

Produtos afetados

Suitecrm