CVE Intelligence

Sugarcrm Sugarcrm vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Sugarcrm Sugarcrm: 1 record(s), with affected versions and fixes.
cpe:2.3:a:sugarcrm:sugarcrm

CVE-2023-22952 High · 8.8 KEV Urgent · 72 Public exploit CWE-20 Jan 11, 2023
Multiple SugarCRM Products Remote Code Execution Vulnerability
In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation.