Security Advisory

CVE-2023-49508

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-16 00:00:00
Last updated 2025-03-27 14:56:06
Assigner mitre
State PUBLISHED

Description

Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component.