Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2023/11/14 4:19 p.m.22 views

CVE-2023-6130 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

7.5CVSS9AI score0.00963EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/14 4:19 p.m.16 views

CVE-2023-6130 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

7.5CVSS7AI score
SaveExploits0References4
CVE
CVE
added 2023/11/14 4:19 p.m.77 views

CVE-2023-6130

CVE-2023-6130 is a path traversal vulnerability in SuiteCRM. The issue arises from inadequate filtering of path components ('..\filename') in the GitHub repository, allowing potentially arbitrary file retrieval from the underlying filesystem. Affected versions are SuiteCRM prior to 7.14.2, 7.12.1...

8.8CVSS7.8AI score0.00963EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder