CVE-2020-15300: Medium severity sugarcrm vulnerability
Published Nov 18, 2020
·Updated
SuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document.
Affected Software
1 affected component
SalesAgility SuiteCRM<=7.11.13
Event History
Nov 18, 2020
CVE Published
via MITRE·09:06 PM
Data Sourced
via MITRE·09:06 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this Open Redirect vulnerability in SuiteCRM?
The vulnerability ID for this Open Redirect vulnerability in SuiteCRM is CVE-2020-15300.
2
What is the severity of CVE-2020-15300?
The severity of CVE-2020-15300 is medium, with a CVSS score of 6.1.
3
How does the Open Redirect vulnerability work in SuiteCRM?
The Open Redirect vulnerability in SuiteCRM allows an attacker to redirect users to a malicious website by crafting a specially crafted SVG document in the Documents module.
4
Which version of SuiteCRM is affected by CVE-2020-15300?
SuiteCRM versions up to and including 7.11.13 are affected by CVE-2020-15300.
5
Is there a fix available for CVE-2020-15300?
Yes, it is recommended to update to a fixed version of SuiteCRM to address the Open Redirect vulnerability. Please refer to the vendor's website for the latest patches and updates.