GHSA-rvcg-9g68-cr9c
GitHub Security Advisory
⚠ Unreviewed
CRITICAL
Has CVE
Advisory Details
ITCube CRM in versions from 2023.2 through 2025.2 is vulnerable to path traversal. Unauthenticated remote attacker is able to exploit vulnerable parameter fileName and construct payloads that allow to download any file accessible by the the web server process.
Related CVEs
Key Information
9.0
/10
Dataset
Last updated: September 9, 2025 6:37 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.