CVE-2023-49508

Published February 16th, 2024

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component.

YetiForceCompany/YetiForceCRM

We've moved! For more information, visit https://github.com/YetiForceCompany/YetiForce

GitHub

1.79K

c4v4r0n/Research

GitHub