Lucene search

[email protected]CVE-2023-6124

HistoryNov 14, 2023 - 3:15 p.m.

CVE-2023-6124

2023-11-1415:15:08

CWE-918

[email protected]

web.nvd.nist.gov

cve-2023-6124

ssrf

github

salesagility

suitecrm

security vulnerability

nvd

5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

7.2 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

13.3%

JSON

Server-Side Request Forgery (SSRF) in GitHub repository salesagility/suitecrm prior to 7.14.2, 8.4.2, 7.12.14.

CPENameOperatorVersion
salesagility:suitecrmsalesagility suitecrmlt7.12.14
salesagility:suitecrmsalesagility suitecrmeq7.6.0
salesagility:suitecrmsalesagility suitecrmeq7.6.9
salesagility:suitecrmsalesagility suitecrmeq7.1.3
salesagility:suitecrmsalesagility suitecrmeq7.1.7
salesagility:suitecrmsalesagility suitecrmeq7.10.26
salesagility:suitecrmsalesagility suitecrmeq7.8.1
salesagility:suitecrmsalesagility suitecrmeq7.5.0
salesagility:suitecrmsalesagility suitecrmeq7.10.3
salesagility:suitecrmsalesagility suitecrmeq7.4.0

CPE	Name	Operator	Version
salesagility:suitecrm	salesagility suitecrm	lt	7.12.14
salesagility:suitecrm	salesagility suitecrm	eq	7.6.0
salesagility:suitecrm	salesagility suitecrm	eq	7.6.9
salesagility:suitecrm	salesagility suitecrm	eq	7.1.3
salesagility:suitecrm	salesagility suitecrm	eq	7.1.7
salesagility:suitecrm	salesagility suitecrm	eq	7.10.26
salesagility:suitecrm	salesagility suitecrm	eq	7.8.1
salesagility:suitecrm	salesagility suitecrm	eq	7.5.0
salesagility:suitecrm	salesagility suitecrm	eq	7.10.3
salesagility:suitecrm	salesagility suitecrm	eq	7.4.0

Rows per page:

1-10 of 1761

References

github.com/salesagility/suitecrm/commit/54bc56c3bd9f1db75408db1c1d7d652c3f5f71e9

huntr.com/bounties/aed4d8f3-ab9a-42fd-afea-b3ec288a148e

5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

7.2 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

13.3%

JSON

Related for CVE-2023-6124

prion1 osv2 cvelist1