| Package | Affected versions | Patched versions |
|---|---|---|
| yellowbox crm | < 6.3.4 | 6.3.4 |
An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to deploy a new WebApp WAR file to the Tomcat server via Path Traversal, allowing remote code execution with SYSTEM privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free