CVE-2020-8785: SQL Injection
Published Mar 16, 2020
·Updated
SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 3 of 4).
Affected Software
2 affected components
SalesAgility SuiteCRM>=7.10.0<7.10.23
SalesAgility SuiteCRM>=7.11.0<7.11.11
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SuiteCRMto a version that resolves this vulnerability.Fixed in 7.10.23 - Upgrade
Upgrade
SuiteCRMto a version that resolves this vulnerability.Fixed in 7.11.11
Event History
Mar 16, 2020
CVE Published
via MITRE·09:35 PM
Data Sourced
via MITRE·09:35 PM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2020-8785?
CVE-2020-8785 is an SQL Injection vulnerability in SuiteCRM versions prior to 7.10.23 and 7.11.11.
2
How does CVE-2020-8785 affect SuiteCRM?
CVE-2020-8785 allows attackers to perform SQL Injection attacks on SuiteCRM installations.
3
What is the severity of CVE-2020-8785?
CVE-2020-8785 has a severity rating of critical, with a score of 9.8.
4
What is the affected software for CVE-2020-8785?
The affected software for CVE-2020-8785 is SuiteCRM versions prior to 7.10.23 and 7.11.11.
5
How can I fix CVE-2020-8785?
To fix CVE-2020-8785, update SuiteCRM to version 7.10.23 or 7.11.11.