CVE-2026-6377

37th percentile - higher than 37% of all known CVEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path Traversal. This issue affects CSM (Customer Service Management): from 6.8.9 before 8.0.3.

An attacker can read or write files outside the application directory, potentially leading to disclosure of sensitive data or further system compromise.

Upgrade CSM to version 8.0.3 or later, which includes the fix.