CVE-2020-8783: SQL Injection
SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 1 of 4).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.10.23 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.11.11
Event History
Frequently Asked Questions
What is CVE-2020-8783?
CVE-2020-8783 refers to a SQL Injection vulnerability in SuiteCRM versions 7.10.x prior to 7.10.23 and 7.11.x prior to 7.11.11.
How severe is CVE-2020-8783?
CVE-2020-8783 has a severity rating of 9.8 (critical).
Which versions of SuiteCRM are affected by CVE-2020-8783?
SuiteCRM versions 7.10.x prior to 7.10.23 and 7.11.x prior to 7.11.11 are affected by CVE-2020-8783.
How can I fix CVE-2020-8783?
To fix CVE-2020-8783, it is recommended to upgrade SuiteCRM to version 7.10.23 or 7.11.11 depending on the installed version.
Where can I find more information about CVE-2020-8783?
You can find more information about CVE-2020-8783 in the SuiteCRM documentation releases: [7.10.23](https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_23) and [7.11.11](https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_11).