{"action":"Upgrade yetiforce/yetiforce-crm to 6.5.0 or later.","affected":[{"fixed":"6.5.0","introduced":"0"}],"component":"yetiforce/yetiforce-crm","cve_ids":["CVE-2023-49508"],"ecosystem":"Packagist","epss":0.0104,"exploited":false,"fixed_versions":["6.5.0"],"ghsa_id":"GHSA-394m-vxwj-363j","id":"tcs_01M5KESTF0CRE1C15ZXD5FYT3M","modified_at":"2025-03-27T19:09:22.300163Z","published_at":"2024-02-16T09:30:25Z","references":["https://osv.dev/vulnerability/GHSA-394m-vxwj-363j","https://nvd.nist.gov/vuln/detail/CVE-2023-49508","https://github.com/YetiForceCompany/YetiForceCRM/commit/ba3a348aa6ecdf0a1d8b289cbb679bebcda7a132","https://github.com/YetiForceCompany/YetiForceCRM","https://github.com/c4v4r0n/Research/tree/main/CVE-2023-49508","https://huntr.com/bounties/29ed641d-eb03-4532-aed4-f96e11f78983"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-394m-vxwj-363j","url":"https://osv.dev/vulnerability/GHSA-394m-vxwj-363j"}],"summary":"YetiForceCRM Directory Traversal vulnerability"}