Skip to content
OpenAdvisories
Critical WID-SEC-2025-2511 2 CVEs

SuiteCRM: Mehrere Schwachstellen

Published Nov 6, 2025 · Updated Nov 6, 2025 · de-DE

Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SuiteCRM ausnutzen, um beliebigen Programmcode auszuführen oder Daten zu manipulieren.

Product

SuiteCRM ist eine Open-Source-Customer-Relationship-Management-Anwendung (CRM) zur Verwaltung von Kundenbeziehungen.

Vulnerabilities 2

  • Critical 9.3
    CVE-2022-50589

    SuiteCRM < 7.12.6 SQL Injection via 'export' Functionality

    SuiteCRM versions prior to 7.12.6 contain a SQL injection vulnerability within the processing of the ‘uid’ parameter within the ‘export’ functionality. Successful exploitation allows remote unauthenticated attackers to ultimately execute arbitrary code.

    Suite CRM SuiteCRM
  • High 8.8
    CVE-2022-50590

    SuiteCRM < 7.12.6 Type Confusion via 'deleteAttachment' Functionality

    SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects inc…

    Suite CRM SuiteCRM

Revision history

  1. #1

    Initiale Fassung

References