CVEvulnerability

CVE-2023-41149

9.8 CRITICAL Published 2023-09-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-09-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78

Description

F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running.

Affected configurations

• f-revocrm f-revocrm 7.3.7 • f-revocrm f-revocrm 7.3.8

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References