Lucene search

K
cvelistMitreCVELIST:CVE-2022-38843
HistorySep 16, 2022 - 1:26 p.m.

CVE-2022-38843

2022-09-1613:26:44
mitre
www.cve.org
3
espocrm
version 7.1.8
unrestricted file upload
vulnerability
malicious file
server compromise

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

42.9%

EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server. Attacker may execute these malicious files to run unintended code on the server to compromise the server.

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

42.9%

Related for CVELIST:CVE-2022-38843