Описание
F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running.
Ссылки
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:f-revocrm:f-revocrm:7.3.7:*:*:*:*:*:*:*
cpe:2.3:a:f-revocrm:f-revocrm:7.3.8:*:*:*:*:*:*:*
EPSS
Процентиль: 66%
0.00526
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-78
Связанные уязвимости
CVSS3: 9.8
github
больше 2 лет назад
F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running.
EPSS
Процентиль: 66%
0.00526
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-78