CVE-2023-6131

Summary: CVE-2023-6131 is a code injection vulnerability in SuiteCRM (SalesAgility) affecting versions prior to 7.14.2, 7.12.14, and 8.4.2. Affected software: SuiteCRM (SalesAgility). Root cause / vulnerability type: Code injection in the GitHub repository path for SuiteCRM. Impact (as stated): N...

CVE-2023-6130 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6130 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6130 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6130

CVE-2023-6130 is a path traversal vulnerability in SuiteCRM. The issue arises from inadequate filtering of path components ('..\filename') in the GitHub repository, allowing potentially arbitrary file retrieval from the underlying filesystem. Affected versions are SuiteCRM prior to 7.14.2, 7.12.1...

CVE-2023-6128

Cross-site Scripting XSS - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6126

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

Code injection

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6128 Cross-site Scripting (XSS) - Reflected in salesagility/suitecrm

Cross-site Scripting XSS - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6128

CVE-2023-6128 is a Cross-site Scripting (XSS) vulnerability reported as a reflected XSS affecting SuiteCRM. Affected versions are prior to 7.14.2, 7.12.14, and 8.4.2. The issue stems from insufficient input validation/escaping in responses that include user-supplied data, enabling injection of ma...

CVE-2023-6127 Unrestricted Upload of File with Dangerous Type in salesagility/suitecrm

Unrestricted Upload of File with Dangerous Type in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6127

CVE-2023-6127 affects SuiteCRM deliveries via the GitHub repository salesagility/suitecrm with an unrestricted upload of files containing dangerous types prior to versions 7.14.2, 7.12.14, and 8.4.2. The issue, as described across multiple feeds (NVD, Red Hat, osv.dev, etc.), centers on allowing ...

CVE-2023-6126 Code Injection in salesagility/suitecrm

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6126 Code Injection in salesagility/suitecrm

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6126

CVE-2023-6126 refers to a Code Injection in the GitHub repository salesagility/suitecrm for versions prior to 7.14.2, 7.12.14, and 8.4.2. The connected records consistently describe a code injection vulnerability affecting SuiteCRM; some sources also discuss HTML injection in SuiteCRM, but the CV...

CVE-2023-6125 Code Injection in salesagility/suitecrm

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6125 Code Injection in salesagility/suitecrm

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6125

SuiteCRM CVE-2023-6125 is a Code Injection vulnerability in the salesagility/suitecrm project, affecting versions prior to 7.14.2, 7.12.14, and 8.4.2. The NVD entry rates it HIGH (8.8 CVSSv3.1) with network attack vector, low attack complexity, and no user interaction, indicating potential remote...

CVE-2023-6124

Server-Side Request Forgery SSRF in GitHub repository salesagility/suitecrm prior to 7.14.2, 8.4.2, 7.12.14...