CVE-2019-12601: SQL Injection
Published Jun 7, 2019
·Updated
SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 3 of 3).
Affected Software
5 affected components
SalesAgility SuiteCRM>=7.8.0<=7.8.5
SalesAgility SuiteCRM>=7.8.6<=7.8.11
SalesAgility SuiteCRM>=7.8.12<7.8.30
SalesAgility SuiteCRM>=7.10.0<7.10.17
SalesAgility SuiteCRM>=7.11.0<7.11.5
Event History
Jun 7, 2019
CVE Published
via MITRE·05:33 PM
Data Sourced
via MITRE·05:33 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue in SuiteCRM?
The vulnerability ID of this issue in SuiteCRM is CVE-2019-12601.
2
What is the severity level of CVE-2019-12601?
CVE-2019-12601 has a severity level of critical.
3
What is the affected software version range for CVE-2019-12601?
CVE-2019-12601 affects SuiteCRM versions 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5.
4
What is the nature of the vulnerability in CVE-2019-12601?
CVE-2019-12601 allows SQL Injection.
5
How can I fix the vulnerability in CVE-2019-12601 in SuiteCRM?
To fix the vulnerability in CVE-2019-12601, update your SuiteCRM installation to version 7.8.30, 7.10.17, or 7.11.5.