Description

EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server. Attacker may execute these malicious files to run unintended code on the server to compromise the server.

Remediation

References

CVE-2022-38843

Related Vulnerabilities

Jboss EAP Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2019-3805)

WordPress Plugin Quotes and Tips by BestWebSoft Cross-Site Scripting (1.32)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.5.8.1)

PHP Numeric Errors Vulnerability (CVE-2016-10158)

Liferay Portal Observable Timing Discrepancy Vulnerability (CVE-2025-43754)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-434 CVE-2022-38843