{"id":"CVE-2023-41149","state":"PUBLISHED","title":"F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an ar","description":"F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running.","publishedAt":"2023-09-06T12:35:22.757Z","updatedAt":"2024-09-26T20:40:04.712Z","severity":null,"assigner":"jpcert","products":["Thinkingreed Inc.  F-RevoCRM "],"affected":[{"vendor":"Thinkingreed Inc. ","product":"F-RevoCRM ","versions":[{"version":"version7.3.7 and version7.3.8 ","status":"affected"}]}],"references":["https://f-revocrm.jp/2023/08/9394/","http://jvn.jp/en/jp/JVN78113802/"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:17.512Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/41xxx/CVE-2023-41149.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-41149","state":"PUBLISHED","datePublished":"2023-09-06T12:35:22.757Z","dateUpdated":"2024-09-26T20:40:04.712Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2023-08-24T00:34:39.254Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running."}],"affected":[{"vendor":"Thinkingreed Inc. ","product":"F-RevoCRM ","versions":[{"version":"version7.3.7 and version7.3.8 ","status":"affected"}]}],"references":[{"url":"https://f-revocrm.jp/2023/08/9394/"},{"url":"http://jvn.jp/en/jp/JVN78113802/"}],"problemTypes":[{"descriptions":[{"description":"OS command injection","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2023-09-06T12:35:22.757Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://f-revocrm.jp/2023/08/9394/","tags":["x_transferred"]},{"url":"http://jvn.jp/en/jp/JVN78113802/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T18:54:04.326Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-26T20:39:55.186689Z","id":"CVE-2023-41149","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-26T20:40:04.712Z"}}]}}}