EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2023-5965 - Vulnerability Database

EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2023-5965

High

Reference: CVE-2023-5965

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-5965

Title: EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability

Overview:

An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5 via the update form which could lead to arbitrary PHP code execution.