SalesAgility SuiteCRM Remote Code Execution (CVE-2022-23940)

A remote code execution vulnerability exists in SalesAgility SuiteCRM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2022-23940

creationtimestamp| type| source ---|---|--- 2022-03-11 06:40:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1646 2024-08-01 12:09:53+00:00| seen| MISP/4c20a67f-a4c2-4cca-86c4-710293720e5d...

CVE-2022-23940

SuiteCRM remote code execution (CVE-2022-23940) affects 7.12.1 and 8.x up to 8.0.1. Exploitation relies on deserializing crafted data in email_recipients within the Scheduled Reports module, allowing an authenticated user to trigger PHP object deserialization and execute code. The description not...