CVE-2023-5966: Unrestricted Upload of File with Dangerous Type in EspoCRM
An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the extension deployment form, which could lead to arbitrary PHP code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Enable the "restrictedMode" option in the configuration menu to restrict exploitation.
EspoCRM restrictedMode = enabled
Event History
Frequently Asked Questions
What is CVE-2023-5966?
CVE-2023-5966 is a vulnerability in EspoCRM that allows an authenticated attacker to upload a malicious zip file, leading to arbitrary PHP code execution.
How severe is CVE-2023-5966?
CVE-2023-5966 has a severity score of 9.1 (critical).
Which version of EspoCRM is affected by CVE-2023-5966?
EspoCRM version 7.2.5 up to and including 7.5.2 is affected by CVE-2023-5966.
How can an attacker exploit CVE-2023-5966?
An attacker with authenticated privileges can upload a specially crafted zip file via the extension deployment form in EspoCRM, which can lead to arbitrary PHP code execution.
How can I fix CVE-2023-5966?
To fix CVE-2023-5966, update EspoCRM to a version higher than 7.5.2.