CVE-2023-36255

HighCVSS 8.8

Published: 03/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

57.36%

99th percentile - higher than 99% of all known CVEs

Summary

A vulnerability in Eramba Enterprise and Community edition version 3.19.1 allows a remote attacker to execute arbitrary code by manipulating the 'path' parameter in the URL.

Risk Assessment

An attacker could take control of the server, steal data, or disrupt operations, posing a serious threat to confidentiality, integrity, and availability.

Recommendation

Immediately update Eramba to the latest available version that fixes this vulnerability and restrict access to the application to trusted networks only.

Original NVD description (English source)

An issue in Eramba Limited Eramba Enterprise and Community edition v.3.19.1 allows a remote attacker to execute arbitrary code via the path parameter in the URL.