CVE-2023-5965 PoC — Unrestricted Upload of File with Dangerous Type in EspoCRM

Source

https://github.com/pedrojosenavasperez/cve-2023-5965

Associated Vulnerability

Title:Unrestricted Upload of File with Dangerous Type in EspoCRM (CVE-2023-5965)
Description:An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution.

Readme

# POC cve-2023-5965

[Advisory](https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-espocrm)

EspoCRM 2.7.4 and earlier is vulnerable to an arbitrary file upload that can lead to code execution in the add upgrade functionality.

The zip file on this repo upload a web shell to /webshell.php

File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →