CVE:CVE-2019-14767
CNNVD:CNNVD-202001-918
DIMO YellowBox CRM  6.3.4之前版本中存在路径遍历漏洞。攻击者可借助images/Apparence (dossier=../)和servletrecuperefichier (document=../)利用该漏洞从服务器下载任意文件。
solution:Upgrade dimo-crm yellowbox_crm to a higher version than 6.3.4,and avoid the version (,6.3.4)