129 matches found
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository salesagility/suitecrm prior to 7.14.2, 8.4.2, 7.12.14...
CVE-2023-6124 Server-Side Request Forgery (SSRF) in salesagility/suitecrm
Server-Side Request Forgery SSRF in GitHub repository salesagility/suitecrm prior to 7.14.2, 8.4.2, 7.12.14...
CVE-2023-6124 Server-Side Request Forgery (SSRF) in salesagility/suitecrm
Server-Side Request Forgery SSRF in GitHub repository salesagility/suitecrm prior to 7.14.2, 8.4.2, 7.12.14...
CVE-2023-6124
CVE-2023-6124 corresponds to a Server-Side Request Forgery (SSRF) in SuiteCRM (salesagility/suitecrm), tracked across multiple sources. Affected versions are prior to 7.14.2, 8.4.2, and 7.12.14. The vulnerability is caused by insufficient input validation that enables an attacker to cause the ser...
CVE-2023-6124 Server-Side Request Forgery (SSRF) in salesagility/suitecrm
Server-Side Request Forgery SSRF in GitHub repository salesagility/suitecrm prior to 7.14.2, 8.4.2, 7.12.14...
CVE-2023-5353
Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.14.1...
Improper access control
Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.14.1...
CVE-2023-5353 Improper Access Control in salesagility/suitecrm
Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.14.1...
CVE-2023-5353
CVE-2023-5353 affects the GitHub repository salesagility/suitecrm prior to version 7.14.1. The issue is described as improper access control in SuiteCRM, enabling unauthorized access due to insufficient permission checks. Multiple connected sources (Red Hat, OSV, CVE listings, and related vulnera...
CVE-2023-5353 Improper Access Control in salesagility/suitecrm
Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.14.1...
CVE-2023-5350
SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1...
Sql injection
SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1...
CVE-2023-5351 Cross-site Scripting (XSS) - Stored in salesagility/suitecrm
Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1...
CVE-2023-5351
CVE-2023-5351 is a stored Cross-site Scripting (XSS) vulnerability affecting SuiteCRM versions prior to 7.14.1. The issue arises from storing user input and displaying it without proper validation. Public sources in connected docs confirm affected software (SuiteCRM) and versions (
CVE-2023-5350 SQL Injection in salesagility/suitecrm
SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1...
CVE-2023-5350 SQL Injection in salesagility/suitecrm
SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1...
CVE-2023-5350
CVE-2023-5350 corresponds to a SQL injection in the SuiteCRM project by SalesAgility, arising from improper validation/cleaning of the duplicate_parent_id field. Affected software: SuiteCRM versions prior to 7.14.1. The vulnerability can allow an attacker to execute SQL commands on the database, ...
CVE-2023-3627
Cross-Site Request Forgery CSRF in GitHub repository salesagility/suitecrm-core prior to 8.3.1...