CVE-2022-0756mediumCWE-862

CVE-2022-0756: falha de média gravidade em salesagility/suitecrm

Missing Authorization in salesagility/suitecrm

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar salesagility/suitecrm

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.4epss 0.6%
Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
salesagility · salesagility/suitecrm
CVEs relacionadas — salesagility/suitecrm

No mesmo produto, das mais perigosas para as menos.

CVE-2023-1034MEDIUMPath Traversal: '\..\filename' in salesagility/suitecrmEPSS 26.2%CVE-2023-5350MEDIUMSQL Injection in salesagility/suitecrmEPSS 2.2%CVE-2023-6131HIGHCode Injection in salesagility/suitecrmEPSS 1.0%CVE-2023-6130HIGHPath Traversal: '\..\filename' in salesagility/suitecrmEPSS 1.0%CVE-2022-0754HIGHSQL Injection in salesagility/suitecrmEPSS 0.8%CVE-2023-6125MEDIUMCode Injection in salesagility/suitecrmEPSS 0.8%