Unrated severityNVD Advisory· Published Jan 7, 2025· Updated Jan 8, 2025

CVE-2022-45185

Description

An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can be used to achieve code execution.

Affected products

SuiteCRM/SuiteCRMdescription
Suitecrm/Suitecrmllm-fuzzy
Range: = 7.12.7
osv-coords
pkg:bitnami/suitecrm
Range: >= 7.12.7, <= 7.12.7

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

docs.suitecrm.com/admin/releases/7.12.x/mitre
github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_SuiteCRM.pymitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000