Lucene search

K
vulnrichment@huntr_aiVULNRICHMENT:CVE-2023-6130
HistoryNov 14, 2023 - 4:19 p.m.

CVE-2023-6130 Path Traversal: '\..\filename' in salesagility/suitecrm

2023-11-1416:19:29
CWE-29
@huntr_ai
github.com
1
cve-2023
path traversal
salesagility/suitecrm
github
7.14.2
7.12.14
8.4.2

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Path Traversal: ‘..\filename’ in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*"
    ],
    "vendor": "salesagility",
    "product": "suitecrm",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "7.12.14",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "7.14.2",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.4.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-6130