CVE-2022-38843

EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server

published September 16, 2022

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server. Attacker may execute these malicious files to run unintended code on the server to compromise the server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01348 · 71.2th percentile
Published
2022-09-16T13:26Z
EPSS history
Timeline
  • 16 SEP 13:26Z
    EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server
    cvelistv5