CVE-2020-17373: SQL Injection
Published Aug 12, 2020
·Updated
SugarCRM before 10.1.0 (Q3 2020) allows SQL Injection.
Affected Software
1 affected component
SugarCRM SugarCRM<10.1.0
Event History
Aug 12, 2020
CVE Published
via MITRE·12:28 PM
Data Sourced
via MITRE·12:28 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-17373?
The severity of CVE-2020-17373 is medium with a CVSS score of 5.3.
2
How does CVE-2020-17373 affect SugarCRM?
CVE-2020-17373 affects SugarCRM versions before 10.1.0 (Q3 2020) and allows SQL Injection.
3
What is SQL Injection?
SQL Injection is a code injection technique that attackers use to exploit vulnerabilities in a website's database layer, allowing them to perform unauthorized actions such as retrieving, modifying, or deleting data.
4
What is the Common Weakness Enumeration (CWE) for CVE-2020-17373?
The Common Weakness Enumeration (CWE) for CVE-2020-17373 is CWE-89 (SQL Injection).
5
How do I fix the SQL Injection vulnerability in SugarCRM?
To fix the SQL Injection vulnerability in SugarCRM, update to version 10.1.0 (Q3 2020) or later.