CVE-2023-41149 Information

Description

F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited an attacker who can access the product may execute an arbitrary OS command on the server where the product is running.

Reference

https://f-revocrm.jp/2023/08/9394/ http://jvn.jp/en/jp/JVN78113802/