Multiple SugarCRM Products Remote Code Execution Vulnerability - CVE-2023-22952 - Vulnerability Database

Multiple SugarCRM Products Remote Code Execution Vulnerability - CVE-2023-22952

High

Reference: CVE-2023-22952

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-22952

Title: Multiple SugarCRM Products Remote Code Execution Vulnerability

Overview:

In SugarCRM before 12.0. Hotfix 91155 a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation.