Skip to content
OpenAdvisories
Unscored CVE-2023-41149 EUVD-2023-45668GHSA-3f2g-h9gm-mf27

F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who…

Published Sep 6, 2023 · Updated Sep 26, 2024 · Assigned by jpcert

Description

F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running.

Affected products

VendorProductAffectedFixed
Thinkingreed F-RevoCRM version7.3.7 and version7.3.8 —

References