CVE-2023-1034

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...

CVE-2023-1034 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...

CVE-2023-1034 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...

CVE-2023-1034 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...

CVE-2023-1034

CVE-2023-1034 describes a path traversal vulnerability in the SuiteCRM project where the sequence "..\filename" can be used to access files outside the web root. Affected software: salesagility/suitecrm versions prior to 7.12.9. The root cause is improper validation of file paths, enabling unauth...