Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
SugarCRM Improper Input Validation Vulnerability - CVE-2017-14509 - Vulnerability Database
SugarCRM

SugarCRM Improper Input Validation Vulnerability - CVE-2017-14509

High
Reference: CVE-2017-14509
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-14509
Title: SugarCRM Improper Input Validation Vulnerability
Overview:

An issue was discovered in SugarCRM before 7.7.2.3 7.8.x before 7.8.2.2 and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26). A remote file inclusion has been identified in the Connectors module allowing authenticated users to include remotely accessible system files via a moduleCallRestampurl query string. Proper input validation has been added to mitigate this issue.