Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path Traversal.
This issue affects CSM (Customer Service Management): from 6.8.9 before 8.0.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Next4Biz Information Technologies | CSM (Customer Service Management) | 6.8.9 – < 8.0.3 | 8.0.3 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Next4Biz CSM - Arbitrary File Read via DownloadFileHandler http/cves/2026/CVE-2026-6377.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1027 government-resource