VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 16, 2022· Updated Jun 17, 2026

CVE-2022-38843

CVE-2022-38843

Description

EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server. Attacker may execute these malicious files to run unintended code on the server to compromise the server.

Affected products

4
  • Espocrm/Espocrm3 versions
    cpe:2.3:a:espocrm:espocrm:7.1.8:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:espocrm:espocrm:7.1.8:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 7.1.8
  • osv-coords
    pkg:bitnami/espocrm
    Range: >= 7.1.8, <= 7.1.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.