SQL Injection in salesagility/suitecrm
CVE-2022-0754

7.1HIGH

Key Information:

Vendor

Salesagility

Status
Salesagility/suitecrm
Vendor
CVE Published:
7 March 2022

What is CVE-2022-0754?

SQL Injection in GitHub repository salesagility/suitecrm prior to 7.12.5.

Affected Version(s)

salesagility/suitecrm < 7.12.5

References

https://github.com/salesagility/suitecrm/commit/e93b269f6...
x_refsource_MISC
https://huntr.dev/bounties/8afb7991-c6ed-42d9-bd9b-1cc834...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.