Security Advisory

CVE-2023-49508

6.5
MEDIUM

Vulnerability Description

Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component.
Published Date February 16, 2024
Official Source NIST NVD Advisory