Yonyou U8 CRM

2 known vulnerabilities in Yonyou U8 CRM, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2023-54403 CVSS 8.7 high Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows unauthenticated…
CVE-2024-58385 CVSS 9.3 critical Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the…