CVE Intelligence

Sugarcrm vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Sugarcrm products: 1 record(s), with severity, exploitation and fixes.

Sugarcrm 1

Exploited only (KEV) →

CVE-2023-22952 High · 8.8 KEV Urgent · 72 Public exploit CWE-20 Jan 11, 2023
Multiple SugarCRM Products Remote Code Execution Vulnerability
In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation.