CVE-2008-2045: Path Traversal
Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to read arbitrary files via a full path in the URL parameter to modules/Feeds/Feed.php, which places the contents into a related cache file in the .cache/feeds directory.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2045?
CVE-2008-2045 is considered a medium severity vulnerability due to its ability to allow unauthorized file access.
How do I fix CVE-2008-2045?
To fix CVE-2008-2045, upgrade to a patched version of SugarCRM that addresses this vulnerability.
Which versions are affected by CVE-2008-2045?
CVE-2008-2045 affects SugarCRM Sugar Community Edition versions 4.5.1 and 5.0.0.
What type of vulnerability is CVE-2008-2045?
CVE-2008-2045 is an absolute path traversal vulnerability that allows reading arbitrary files.
Can CVE-2008-2045 lead to further exploits?
Yes, CVE-2008-2045 can potentially lead to further exploits by exposing sensitive information on the server.