CVE-2020-15301
First published: Wed Nov 18 2020(Updated: )
SuiteCRM through 7.11.13 allows CSV Injection via registration fields in the Accounts, Contacts, Opportunities, and Leads modules. These fields are mishandled during a Download Import File Template operation.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SalesAgility SuiteCRM | <=7.11.13 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of the SuiteCRM CSV Injection vulnerability?
The vulnerability ID of the SuiteCRM CSV Injection vulnerability is CVE-2020-15301.
What is the description of the SuiteCRM CSV Injection vulnerability?
The SuiteCRM CSV Injection vulnerability allows CSV Injection via registration fields in the Accounts, Contacts, Opportunities, and Leads modules. These fields are mishandled during a Download Import File Template operation.
What is the severity rating of the SuiteCRM CSV Injection vulnerability?
The severity rating of the SuiteCRM CSV Injection vulnerability is high, with a severity value of 7.8.
Which software versions are affected by the SuiteCRM CSV Injection vulnerability?
SuiteCRM versions up to and including 7.11.13 are affected by the CSV Injection vulnerability.
How can the SuiteCRM CSV Injection vulnerability be exploited?
The SuiteCRM CSV Injection vulnerability can be exploited by injecting malicious data into registration fields in the Accounts, Contacts, Opportunities, and Leads modules.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/tags
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/salesagility
- canonical/salesagility suitecrm
- version/salesagility suitecrm/7.11.13