Lucene search
PRIOn knowledge basePRION:CVE-2023-5966HistoryNov 30, 2023 - 2:15 p.m.
Code injection
2023-11-3014:15:00
PRIOn knowledge base
www.prio-n.com
3
authenticated attacker
privileged
zip upload
espocrm
arbitrary execution
An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the extension deployment form, which could lead to arbitrary PHP code execution.
Related
nvd
nvd
CVE-2023-5966
2023-11-30 14:15:13
cve
cve
CVE-2023-5966
2023-11-30 14:15:13
osv
osv
CVE-2023-5966
2023-11-30 14:15:13
BIT-espocrm-2023-5966
2024-03-06 10:51:41
githubexploit
githubexploit
Exploit for Unrestricted Upload of File with Dangerous Type in Espocrm
2022-10-20 13:00:10
cvelist
cvelist
CVE-2023-5966 Unrestricted Upload of File with Dangerous Type in EspoCRM
2023-11-30 13:26:48