CVE-2023-3232
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk64th percentile - higher than 64% of all known CVEs
Summary
A critical vulnerability was found in Zhong Bang CRMEB up to version 4.6.0, affecting some unknown processing of the file /api/wechat/app_auth in the Image Upload component. The manipulation leads to deserialization, which may be exploited by attackers.
Risk Assessment
This vulnerability may be exploited by third parties, posing a serious threat to the security of data within the organization.
Recommendation
It is recommended to immediately update Zhong Bang CRMEB to the latest version to mitigate this vulnerability.
Original NVD description (English source)
A vulnerability was found in Zhong Bang CRMEB up to 4.6.0 and classified as critical. This issue affects some unknown processing of the file /api/wechat/app_auth of the component Image Upload. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231503. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.