Skip to content
OpenAdvisories
Critical ICSA-24-172-02 1 CVE

CAREL Boss-Mini

Published Jun 20, 2024 · Updated Jun 20, 2024

Vendor: CAREL Product: Boss-Mini

Summary

Successful exploitation of this vulnerability could allow an attacker to manipulate an argument path, which would lead to information disclosure.

Vulnerabilities 1

  • High 7.3
    CVE-2023-3643 Public exploit Scanner template EPSS 75%

    Boss Mini document file inclusion

    A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack r…

Revision history

  1. #1

    Initial Publication

References