CVE-2023-5965: Unrestricted Upload of File with Dangerous Type in EspoCRM
Published Nov 30, 2023
·Updated
An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution.
Affected Software
1 affected component
EspoCRM EspoCRM<=7.5.2
Remediation
Information
Users with administrator profile can load extensions and updates by design, as this is a functionality that most users use and request. It is possible to restrict exploitation of the vulnerability by enabling the "restrictedMode" option in the configuration menu.
Event History
Nov 30, 2023
CVE Published
via MITRE·01:26 PM
Data Sourced
via MITRE·01:26 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-5965?
CVE-2023-5965 is a vulnerability in EspoCRM that allows an authenticated attacker to upload a malicious zip file, potentially leading to arbitrary PHP code execution.
2
What is the severity of CVE-2023-5965?
CVE-2023-5965 has a severity rating of 9.1 (critical).
3
How does CVE-2023-5965 affect EspoCRM?
CVE-2023-5965 affects EspoCRM version 7.2.5 up to and including 7.5.2.
4
How can an attacker exploit CVE-2023-5965?
An authenticated attacker can exploit CVE-2023-5965 by uploading a specially crafted zip file via the update form in EspoCRM.
5
Is there a fix for CVE-2023-5965?
Yes, upgrading EspoCRM to a version beyond 7.5.2 will fix the vulnerability.