CVE-2020-15301: High severity sugarcrm vulnerability
SuiteCRM through 7.11.13 allows CSV Injection via registration fields in the Accounts, Contacts, Opportunities, and Leads modules. These fields are mishandled during a Download Import File Template operation.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of the SuiteCRM CSV Injection vulnerability?
The vulnerability ID of the SuiteCRM CSV Injection vulnerability is CVE-2020-15301.
What is the description of the SuiteCRM CSV Injection vulnerability?
The SuiteCRM CSV Injection vulnerability allows CSV Injection via registration fields in the Accounts, Contacts, Opportunities, and Leads modules. These fields are mishandled during a Download Import File Template operation.
What is the severity rating of the SuiteCRM CSV Injection vulnerability?
The severity rating of the SuiteCRM CSV Injection vulnerability is high, with a severity value of 7.8.
Which software versions are affected by the SuiteCRM CSV Injection vulnerability?
SuiteCRM versions up to and including 7.11.13 are affected by the CSV Injection vulnerability.
How can the SuiteCRM CSV Injection vulnerability be exploited?
The SuiteCRM CSV Injection vulnerability can be exploited by injecting malicious data into registration fields in the Accounts, Contacts, Opportunities, and Leads modules.