critical·Product Based Web Vulnerabilities·Updated Mar 11, 2026

CAREL Boss Mini <= 1.4.0 - Local File Inclusion

Est. Time~10 seconds

Scan TypeGroup Scan

Targetsdomain, subdomain, ipv4

CostFree

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

CVECVE-2023-3643

7.3

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233889 was assigned to this vulnerability.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Affected

Boss Miniby n/a

1.4.0 Build 6221

Updated Nov 10, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

CAREL Boss Mini <= 1.4.0 - Local File Inclusion

Check your infrastructure.Right now.

Check your infrastructure.
Right now.