CVE-2023-3643

A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclose...

Design/Logic Flaw

A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2023-3643 Boss Mini document file inclusion

A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2023-3643

CVE-2023-3643 affects CAREL Boss Mini 1.4.0 (Build 6221). Multiple sources confirm a path traversal leading to local file inclusion in boss/servlet/document, exploitable over network with no user interaction. Proofs of concept and exploit records exist (PacketStorm, Exploit-DB) indicating remote ...