CVE-2020-8784: SQL Injection
Published Mar 16, 2020
·Updated
SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 2 of 4).
Affected Software
2 affected components
SalesAgility SuiteCRM>=7.10.0<7.10.23
SalesAgility SuiteCRM>=7.11.0<7.11.11
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SuiteCRMto a version that resolves this vulnerability.Fixed in 7.10.23 - Upgrade
Upgrade
SuiteCRMto a version that resolves this vulnerability.Fixed in 7.11.11
Event History
Mar 16, 2020
CVE Published
via MITRE·09:35 PM
Data Sourced
via MITRE·09:35 PM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this SuiteCRM vulnerability?
The vulnerability ID is CVE-2020-8784.
2
What is the severity level of CVE-2020-8784?
The severity level of CVE-2020-8784 is critical.
3
Which versions of SuiteCRM are affected by CVE-2020-8784?
SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 are affected by CVE-2020-8784.
4
What is the CWE number associated with CVE-2020-8784?
The CWE number associated with CVE-2020-8784 is 89.
5
How can I fix the SQL Injection vulnerability in SuiteCRM?
To fix the SQL Injection vulnerability in SuiteCRM, upgrade to version 7.10.23 for SuiteCRM 7.10.x or version 7.11.11 for SuiteCRM 7.11.x.