Skip to content
OpenAdvisories
High WID-SEC-2025-2517 2 CVEs

SuiteCRM: Mehrere Schwachstellen ermöglichen Manipulation von Dateien

Published Nov 9, 2025 · Updated Nov 9, 2025 · de-DE

Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SuiteCRM ausnutzen, um Dateien zu manipulieren.

Product

SuiteCRM ist eine Open-Source-Customer-Relationship-Management-Anwendung (CRM) zur Verwaltung von Kundenbeziehungen.

Vulnerabilities 2

  • High 8.8
    CVE-2025-64492

    SuiteCRM is Vulnerable to Authenticated Time Based Blind SQL Injection

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 8.9.0 and below contain a time-based blind SQL Injection vulnerability. This vulnerability allows an authenticated attacker to infer data from t…

    Suite CRM SuiteCRM-Core
  • Medium 6.5
    CVE-2025-64493

    SuiteCRM is Vulnerable to Authenticated Blind SQL Injection via GraphQL

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 8.6.0 through 8.9.0, there is an authenticated, blind (time-based) SQL-injection inside the appMetadata-operation of the GraphQL-API. This al…

    Suite CRM SuiteCRM-Core

Revision history

  1. #1

    Initiale Fassung

References