critical9.8
CVE-2023-30185
CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \attachment\SystemAttachmentServices.php.
Impact
CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \attachment\SystemAttachmentServices.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Crmeb | Crmeb | from 4.4.0 through 4.6.0 |