CVE-2023-41149

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-09-06 · updated 2026-06-17
Weakness: CWE-78

Description

F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running.

Affected products

Thinkingreed Inc. F-RevoCRM: 7.3.7, 7.3.8

References

http://jvn.jp/en/jp/JVN78113802/
https://f-revocrm.jp/2023/08/9394/
http://jvn.jp/en/jp/JVN78113802/
https://f-revocrm.jp/2023/08/9394/

Get alerted when CVE-2023-41149 or the next vulnerability affects your stack