← All advisories

Unrated severityNVD Advisory· Published Apr 15, 2022· Updated Aug 3, 2024

CVE-2022-27474

CVE-2022-27474

Description

SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field.

Affected products

2

Suitecrm/Suitecrmllm-fuzzy
Range: = 7.11.23
osv-coords
pkg:bitnami/suitecrm
Range: >= 7.11.23, < 7.11.24

Patches

Vulnerability mechanics

References

2

github.com/Mount4in/Mount4in.github.io/blob/master/poc.pymitrex_refsource_MISC
github.com/Mount4in/Mount4in.github.io/blob/master/suitecrm.docxmitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.