Lucene search
PRIOn knowledge basePRION:CVE-2023-5965HistoryNov 30, 2023 - 2:15 p.m.
Code injection
2023-11-3014:15:00
PRIOn knowledge base
www.prio-n.com
3
authenticated attacker
privileged
zip upload
php code execution
security vulnerability
nvd
An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution.
Related
osv
osv
CVE-2023-5965
2023-11-30 14:15:12
BIT-espocrm-2023-5965
2024-03-06 10:51:52
cvelist
cvelist
CVE-2023-5965 Unrestricted Upload of File with Dangerous Type in EspoCRM
2023-11-30 13:26:15
nvd
nvd
CVE-2023-5965
2023-11-30 14:15:12
cve
cve
CVE-2023-5965
2023-11-30 14:15:12
githubexploit
githubexploit
Exploit for Unrestricted Upload of File with Dangerous Type in Espocrm
2022-10-20 15:35:07