Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-38843

EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server. Attacker may execute these malicious files to run unintended code on the server to compromise the server.

Published

2022-09-16T14:15:09.550

Last Modified

2024-11-21T07:17:09.703

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses

Type: Primary
CWE-434

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	espocrm	espocrm	7.1.8	Yes

References

https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-unrestricted-file-upload-7860b15d12bc Exploit, Third Party Advisory ([email protected])
https://medium.com/cybersecurity-valuelabs/espocrm-7-1-8-is-vulnerable-to-unrestricted-file-upload-7860b15d12bc Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)