CVE-2020-17372: XSS
Published Aug 12, 2020
·Updated
SugarCRM before 10.1.0 (Q3 2020) allows XSS.
Affected Software
1 affected component
SugarCRM SugarCRM<10.1.0
Event History
Aug 12, 2020
CVE Published
via MITRE·12:24 PM
Data Sourced
via MITRE·12:24 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2020-17372.
2
What is the title of this vulnerability?
The title of this vulnerability is SugarCRM before 10.1.0 (Q3 2020) allows XSS.
3
What is the severity of CVE-2020-17372?
The severity of CVE-2020-17372 is medium with a score of 5.4.
4
How does CVE-2020-17372 affect SugarCRM?
CVE-2020-17372 affects versions of SugarCRM before 10.1.0 (Q3 2020) and allows for XSS attacks.
5
How can I fix CVE-2020-17372?
To fix CVE-2020-17372, it is recommended to update to version 10.1.0 (Q3 2020) or higher of SugarCRM.