CVE-2018-5715: XSS
Published Jan 16, 2018
·Updated
phprint.php in SugarCRM 3.5.1 has XSS via a parameter name in the query string (aka a $key variable).
Affected Software
1 affected component
SugarCRM SugarCRM=3.5.1
Event History
Jan 16, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2018-5715?
CVE-2018-5715 is a vulnerability in SugarCRM 3.5.1 that allows for XSS attacks via a parameter name in the query string (aka a $key variable).
2
What is the severity of CVE-2018-5715?
The severity of CVE-2018-5715 is medium, with a severity value of 6.1.
3
How does CVE-2018-5715 affect SugarCRM 3.5.1?
CVE-2018-5715 affects SugarCRM 3.5.1 by allowing for XSS attacks through a parameter name in the query string.
4
How can I exploit CVE-2018-5715?
We do not provide information on how to exploit vulnerabilities. It is recommended to update to a patched version of SugarCRM to mitigate the vulnerability.
5
How can I fix CVE-2018-5715?
To fix CVE-2018-5715, update to a version of SugarCRM that includes a patch for the vulnerability.