Path Traversal: '\..\filename' in salesagility/suitecrm
CVE-2023-1034
8.8HIGH
Summary
A path traversal vulnerability was discovered in SuiteCRM, allowing attackers to exploit the system via crafted requests. This flaw enables unauthorized access to files outside the intended directories, which could potentially expose sensitive information. The issue affects SuiteCRM versions prior to 7.12.9, and users are encouraged to upgrade to this version or later to mitigate the risk.
Affected Version(s)
salesagility/suitecrm < 7.12.9
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
CVSS V3.0
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved