CVE-2023-5965: Unrestricted Upload of File with Dangerous Type in EspoCRM
An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Enable the "restrictedMode" option in the EspoCRM configuration menu to restrict exploitation of the vulnerability.
EspoCRM restrictedMode = enabled
Event History
Frequently Asked Questions
What is CVE-2023-5965?
CVE-2023-5965 is a vulnerability in EspoCRM that allows an authenticated attacker to upload a malicious zip file, potentially leading to arbitrary PHP code execution.
What is the severity of CVE-2023-5965?
CVE-2023-5965 has a severity rating of 9.1 (critical).
How does CVE-2023-5965 affect EspoCRM?
CVE-2023-5965 affects EspoCRM version 7.2.5 up to and including 7.5.2.
How can an attacker exploit CVE-2023-5965?
An authenticated attacker can exploit CVE-2023-5965 by uploading a specially crafted zip file via the update form in EspoCRM.
Is there a fix for CVE-2023-5965?
Yes, upgrading EspoCRM to a version beyond 7.5.2 will fix the vulnerability.