← All advisories

Critical severity9.8NVD Advisory· Published May 8, 2023· Updated Jul 9, 2026

CVE-2023-30185

CVE-2023-30185

Description

CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \attachment\SystemAttachmentServices.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Crmeb/Crmeb3 versions
cpe:2.3:a:crmeb:crmeb:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:crmeb:crmeb:*:*:*:*:*:*:*:*range: >=4.4.0,<=4.6.0
- (no CPE)
- (no CPE)range: v4.4 to v4.6

Patches

Vulnerability mechanics

References

2

github.com/c7w1n/CVE-2023-30185/blob/main/CVE-2023-30185.mdnvdThird Party Advisory
www.crmeb.comnvdProduct

News mentions

0

No linked articles in our index yet.