CVE-2023-30185
Critical · CVSS 9.8CRMEB — Arbitrary File Upload (Unrestricted File Upload RCE)
- CVSS
- 9.8
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- CWE-434, CWE-434
Description
CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \attachment\SystemAttachmentServices.php.
Search profile — drives PoC discovery
Symbols SystemAttachmentServices.phpattachment\attachment\SystemAttachmentServices.php
Keywords CVE-2023-30185CRMEB arbitrary file uploadCRMEB v4.4 v4.6 file uploadSystemAttachmentServicesCRMEB unrestricted uploadCRMEB RCE PoC
Versions: v4.4 to v4.6
Ranked PoCs (1) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 0
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T18:30:39.000Z