CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2023/02/25 2:15 a.m.•15 views

CVE-2023-1034

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...

8.8CVSS5.7AI score0.28113EPSS

Exploits1References2

Vulnrichment•added 2023/02/25 12:0 a.m.•7 views

CVE-2023-1034 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...

4.3CVSS8.7AI score0.28113EPSS

Exploits1References2

Cvelist•added 2023/02/25 12:0 a.m.•19 views

CVE-2023-1034 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...

4.3CVSS9AI score0.28113EPSS

Exploits1References2

CVE•added 2023/02/25 12:0 a.m.•61 views

CVE-2023-1034

CVE-2023-1034 describes a path traversal vulnerability in the SuiteCRM project where the sequence "..\filename" can be used to access files outside the web root. Affected software: salesagility/suitecrm versions prior to 7.12.9. The root cause is improper validation of file paths, enabling unauth...

8.8CVSS6.4AI score0.28113EPSS

Exploits1References2Affected Software1