Security Advisory
CVE-2023-5966
4.7
MEDIUM
Vulnerability Description
An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the extension deployment form, which could lead to arbitrary PHP code execution.
Published Date
November 30, 2023
Official Source
NIST NVD Advisory