← All advisories

Unrated severityNVD Advisory· Published Oct 7, 2019· Updated Aug 5, 2024

CVE-2019-17302

CVE-2019-17302

Description

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user.

Affected products

2

SugarCRM/SugarCRMdescription
Sugarcrm/Sugarcrmllm-fuzzy
Range: <8.0.4 (8.x), <9.0.2 (9.x)

Patches

Vulnerability mechanics

References

1

support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-029/mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.