SQL Injection Vulnerability in SugarCRM Export Function by SugarCRM
CVE-2019-17294

8.8HIGH

Key Information:

Vendor

Sugarcrm

Status
Sugarcrm
Vendor
CVE Published:
7 October 2019

What is CVE-2019-17294?

A vulnerability exists in SugarCRM versions prior to 8.0.4 and 9.x prior to 9.0.2 that allows an attacker with regular user permissions to exploit an SQL injection weakness in the system's export function. This flaw could enable unauthorized access to sensitive data, posing a significant risk to the integrity of the database and potentially allowing attackers to manipulate or extract confidential information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://support.sugarcrm.com/Resources/Security/sugarcrm-...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.