Skip to content
Fencer Vulns
high 7.3

CVE-2023-3643 in the critical feed json

Boss Mini document file inclusion

published 2023-07-12 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-44287

cvss
7.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
75.4%
EPSS 75.4% chance of exploitation in 30 days, percentile 99.5%
public exploits
1
Exploit-DB, plus a Nuclei check

Summary

A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233889 was assigned to this vulnerability.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-24-172-02 updated cvss 9.8

CAREL Boss-Mini

  • CAREL Boss-Mini 1.4.0_(Build_6221)
    affected: mitigation “CAREL recommends updating to v1.6.0 or later” ksa.carel.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Timeline

  1. Published
  2. First public exploit (EDB-52482)

Exploit prediction

75.36% chance of exploitation in the next 30 days, higher than 99.5% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-52482 Boss Mini v1.4.0 - Local File Inclusion (LFI) webapps, 2026-03-03
  • Nuclei template CAREL Boss Mini <= 1.4.0 - Local File Inclusion nuclei detection template
  • drive.google.com https://drive.google.com/file/d/1RXmDUAjqZvWSvHUrfRerz7My6M3KX7YG/view referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CNA 3.0 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CNA 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • n/a Boss Mini

Classification

Weakness
  • CWE-73 External Control of File Name or Path

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.