CVE-2023-5966 Unrestricted Upload of File with Dangerous Type in EspoCRM
An authenticated privileged attacker can upload a malicious zip file to execute arbitrary PHP code on the EspoCRM server.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-5966?
CVE-2023-5966 is a medium-severity vulnerability in EspoCRM, published on 30 Nov 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the extension deployment form, which could lead to arbitrary PHP code execution.
Weakness: CWE-434
Which versions are affected by CVE-2023-5966?
1 open source package ship an affected version, including espocrm. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
espocrm Bitnami | All versions | 7.5.2 |
Products include Espocrm Espocrm.
How do I fix CVE-2023-5966?
Upgrade espocrm to 7.5.2 or later.
Is CVE-2023-5966 being exploited?
There is no known exploitation of CVE-2023-5966 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in EspoCRM
Sources
Also known as BIT-espocrm-2023-5966, GHSA-7wx4-fjq2-2hjg.