| Package | Affected versions | Patched versions |
|---|---|---|
| espocrm | ≤ 7.5.2 |
An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free