3 matches found
CVE-2023-6130 Path Traversal: '\..\filename' in salesagility/suitecrm
Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
7.5CVSS9AI score0.00963EPSS
SaveExploits1References2
CVE-2023-6130
CVE-2023-6130 is a path traversal vulnerability in SuiteCRM. The issue arises from inadequate filtering of path components ('..\filename') in the GitHub repository, allowing potentially arbitrary file retrieval from the underlying filesystem. Affected versions are SuiteCRM prior to 7.14.2, 7.12.1...
8.8CVSS7.3AI score0.00963EPSS
SaveExploits1References2Affected Software1
20