SuiteCRM SQL Injection Vulnerability (CNVD-2023-98210)

2023-10-0900:00:00

China National Vulnerability Database

www.cnvd.org.cn

suitecrm

sql injection

vulnerability

data theft

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.1%

JSON

SuiteCRM is a customer relationship management system from the SuiteCRM team. An SQL injection vulnerability exists in SuiteCRM versions prior to 7.14.1 that stems from duplicate_parent_id not being properly validated and cleaned. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data.

CPENameOperatorVersion
suitecrm suitecrmlt7.14.1

CPE	Name	Operator	Version
	suitecrm suitecrm	lt	7.14.1