RULE(RULE ID:338351)

Rule General Information
Release Date: 2024-08-28
Rule Name: Yonyou CRM help.php Arbitrary File Read Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Yonyou CRM is a customer relationship management (CRM) software launched by Yonyou Company, which integrates sales, marketing, customer service and other functions to help enterprises optimize customer management processes, enhance customer satisfaction and competitiveness. Yonyou CRM /pub/help.php has an arbitrary file read vulnerability. Attackers can read arbitrary file on the remote server, leading to information disclosure.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.