ITCube Software vulnerabilities
We track 1 vulnerability in ITCube Software products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 8, 2025.
1vulnerabilities
1critical
0high
0exploited
9.2average CVSS score
Latest ITCube Software vulnerabilities
- 9.2 Critical severity
ITCube CRM: Improper Limitation of a Pathname to a Restricted Directory
ITCube CRM in versions from 2023.2 through 2025.2 is vulnerable to path traversal. Unauthenticated remote attacker is able to exploit vulnerable parameter fileName and construct payloads that allow to download any file accessible by the the web server process.