F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running.
References
| Link | Resource |
|---|---|
| http://jvn.jp/en/jp/JVN78113802/ | Third Party Advisory |
| https://f-revocrm.jp/2023/08/9394/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
08 Sep 2023, 21:21
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-78 | |
| First Time |
F-revocrm
F-revocrm f-revocrm |
|
| CPE | cpe:2.3:a:f-revocrm:f-revocrm:7.3.7:*:*:*:*:*:*:* cpe:2.3:a:f-revocrm:f-revocrm:7.3.8:*:*:*:*:*:*:* |
|
| References | (MISC) https://f-revocrm.jp/2023/08/9394/ - Vendor Advisory | |
| References | (MISC) http://jvn.jp/en/jp/JVN78113802/ - Third Party Advisory |
06 Sep 2023, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-06 13:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-41149
Mitre link : CVE-2023-41149
CVE.ORG link : CVE-2023-41149
JSON object : View
Products Affected
f-revocrm
- f-revocrm
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')