Exploited Vulnerability
Base Score: 8.8 HIGH
SugarCRM Remote Code Execution (RCE) Vulnerability
CVE-2023-22952
About
A Remote Code Execution vulnerability has been identified in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the Email Templates because of missing input validation. Any user privileges can exploit this vulnerability.
Solution
Apply updates per vendor instructions.
Product
| Product | Fixed Release |
| SugarCRM 12.0 Enterprise, Sell, Serve |
12.0.2 |
| SugarCRM 11.0 Professional, Enterprise, Ultimate, Sell, Serve |
11.0.5 |
Published
31.12.2023
Last Modified
11.01.2023
More of
Exploited Vulnerabilities
VMWare Aria Operations – CVE-2023-20887
VMWare Aria Operations for Networks (vRealize Network Insight) is vulnerable to command injection when accepting user input through the Apache Thrift RPC interface.
CVE-20xx-20xxx Testing Printer – 3.8 somehow
CVE-2017-20156 – Exciting Printer – 9.8 Critical CVE-2017-20156 Exciting Printer – 9.8 Critical About A vulnerability was found in Exciting Printer...
Test 2
WEBSITE PAGE TITLE 2 About This is a Sample H1 Heading Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nullam aliquam bibendum dui, nec...