High · 8.8 CVE-2022-45185 EUVD-2022-48093GHSA-qjmp-rfrj-7cv5

An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can …

Published Jan 7, 2025 · Updated Jan 8, 2025 · Assigned by mitre

Description

An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can be used to achieve code execution.

References

https://docs.suitecrm.com/admin/releases/7.12.x/
https://github.com/Orange-Cyberdefense/CVE-repository/
https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_SuiteCRM.py