CVE-2023-54403

Summary

The vulnerability allows unauthenticated attackers to read arbitrary files on the server by manipulating the filePath parameter in /ajax/getemaildata.php, potentially exposing sensitive configuration files with database credentials and service details.

Exploitability

Easy to exploit with no prerequisites; attackers can directly access the vulnerable endpoint without authentication and read any file path they specify.

Blast radius

Multiple systems could be affected across different organizations using Yonyou U8 CRM versions before V16.5 and V18, potentially exposing critical database credentials and application configuration files.

Detection

Monitor for requests to /ajax/getemaildata.php with filePath parameter containing unusual path traversal sequences like '../' or '.../'; look for repeated access patterns to sensitive file paths such as /etc/passwd or application configuration files.

Prioritized remediation

Upgrade to Yonyou U8 CRM V16.5 or V18 to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.