CVE-2023-41149

9.8 criticalEPSS 1.5%

Critical (9.8) in f-revocrm f-revocrm. EPSS 1.5% chance of exploitation in the next 30 days.

F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2023-09-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

f-revocrm:f-revocrm

References

http://jvn.jp/en/jp/JVN78113802/
https://f-revocrm.jp/2023/08/9394/
http://jvn.jp/en/jp/JVN78113802/
https://f-revocrm.jp/2023/08/9394/

Check your stack JSON