CVE-2020-7472

概要

参考情報

• support.sugarcrm.com/Documentation/Sugar_Versions/10.0/Pro/Sugar_10.0.0_Release_Notes · Release Notes
• support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-043 · Vendor Advisory

sugarcrm のその他の脆弱性

• CVE-2023-46816高 8.8An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. A Server Site Template Injection (SSTI) vulnerability has been id…
• CVE-2023-46815高 8.8An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. An Unrestricted File Upload vulnerability has been identified in …
• CVE-2023-35811高 8.8An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been identified in the R…
• CVE-2023-35810高 7.2An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second-Order PHP Object Injection vulnerability has b…
• CVE-2023-35809高 8.8An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability has been identified i…