Lucene search
MitreCVE-2023-22952HistoryJan 11, 2023 - 9:15 a.m.
CVE-2023-22952
2023-01-1109:15:08
CWE-20
mitre
web.nvd.nist.gov
606
In Wild
cve
2023
22952
sugarcrm
hotfix
injection
emailtemplates
vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0.534
Percentile
97.6%
In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation.
Affected configurations
Node
sugarcrmsugarcrmRange11.0.0–11.0.5
ORsugarcrmsugarcrmRange12.0.0–12.0.2
Related
packetstorm
packetstorm
SugarCRM 12.x Remote Code Execution / Shell Upload
2023-03-10 00:00:00
openvas
openvas
SugarCRM 11.0.x < 11.0.5, 12.0.x < 12.0.2 RCE Vulnerability
2023-01-12 00:00:00
nvd
nvd
CVE-2023-22952
2023-01-11 09:15:08
cisa_kev
cisa_kev
Multiple SugarCRM Products Remote Code Execution Vulnerability
2023-02-02 00:00:00
prion
prion
Input validation
2023-01-11 09:15:00
cvelist
cvelist
CVE-2023-22952
2023-01-11 00:00:00
zdt
zdt
SugarCRM 12.x Remote Code Execution / Shell Upload Exploit
2023-03-10 00:00:00
metasploit
metasploit
SugarCRM unauthenticated Remote Code Execution (RCE)
2023-03-09 15:28:03
attackerkb
attackerkb
CVE-2023-22952
2023-01-11 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-03-10 19:00:00
Metasploit 2023 Annual Wrap-Up: Dec. 29, 2023
2023-12-29 19:38:15
thn
thn
Cacti Servers Under Attack as Majority Fail to Patch Critical Vulnerability
2023-01-14 08:11:00
qualysblog
qualysblog
Qualys Survey of Top 10 Exploited Vulnerabilities in 2023
2023-09-26 13:04:00
2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is
2023-12-19 15:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0.534
Percentile
97.6%
Related for CVE-2023-22952