Lucene search

K
cvelist@huntr_aiCVELIST:CVE-2023-6130
HistoryNov 14, 2023 - 4:19 p.m.

CVE-2023-6130 Path Traversal: '\..\filename' in salesagility/suitecrm

2023-11-1416:19:29
CWE-29
@huntr_ai
www.cve.org
2
cve-2023-6130 path traversal
salesagility/suitecrm
github repository
prior to 7.14.2
7.12.14
8.4.2

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

19.3%

Path Traversal: ‘..\filename’ in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

CNA Affected

[
  {
    "vendor": "salesagility",
    "product": "salesagility/suitecrm",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "7.14.2, 7.12.14, 8.4.2",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

19.3%

Related for CVELIST:CVE-2023-6130