Vulnerabilities

TI-2023-04926 CVE-2023-5353 · GHSA-vr9r-v9gj-9422

Improper Access Control in salesagility/suitecrm

MEDIUM 64

Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.14.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00678 Published 2023-10-03 Fixed in 7.14.1 CWE-284

TI-2023-04924 CVE-2023-5351 · GHSA-f9g9-x8qv-qj56

MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00543 Published 2023-10-03 Fixed in 7.14.1 CWE-79

TI-2023-04923 CVE-2023-5350 · GHSA-rvrx-x4gm-4fm2

HIGH 72

SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02173 Published 2023-10-03 Fixed in 7.14.1 CWE-89