CVE-2023-5350

SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1.

CVSS v3.1

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS v3.0

6.4 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

EPSS

1.91% chance of exploitation in the next 30 days, 78th percentile

Published

2023-10-03

Updated

2024-09-19

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/c56563cb-b74e-4174-a09a-cd07689d6736

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/suite_crm_export_sqli.rb

References

• CVE Record
• NVD entry

Related

• CVE-2023-5348
• CVE-2023-5351
• CVE-2023-5347
• CVE-2023-5352
• CVE-2023-5345
• CVE-2023-5353