critical·Product Based Web Vulnerabilities·Updated Mar 11, 2026

CAREL Boss Mini <= 1.4.0 - Local File Inclusion

Run This Scanner →

Est. Time~10 seconds

Scan TypeGroup Scan

Targetsdomain, subdomain, ipv4

CostFree

2.7k

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

CVECVE-2023-3643

7.3

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233889 was assigned to this vulnerability.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Affected

Boss Miniby n/a

1.4.0 Build 6221

Updated Sep 18, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

Run This Scanner →Browse All Tools

CAREL Boss Mini <= 1.4.0 - Local File Inclusion

Check your infrastructure.Right now.

Check your infrastructure.
Right now.