CVE-2020-8787: Input Validation

Q: What is CVE-2020-8787?

CVE-2020-8787 is a vulnerability in SuiteCRM versions prior to 7.10.23 and 7.11.11 that allows for an invalid Bean ID to be submitted.

Q: What is the severity of CVE-2020-8787?

CVE-2020-8787 has a severity value of 7.5, which is classified as high.

Q: Which versions of SuiteCRM are affected by CVE-2020-8787?

SuiteCRM versions prior to 7.10.23 and 7.11.11 are affected by CVE-2020-8787.

Q: How do I fix CVE-2020-8787?

To fix CVE-2020-8787, upgrade to SuiteCRM version 7.10.23 or 7.11.11.

Q: Where can I find more information about CVE-2020-8787?

You can find more information about CVE-2020-8787 in the SuiteCRM release notes for versions 7.10.x and 7.11.x.

Published Mar 16, 2020

Updated

SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow for an invalid Bean ID to be submitted.

Affected Software

2 affected components

SalesAgility SuiteCRM>=7.10.0<7.10.23

SalesAgility SuiteCRM>=7.11.0<7.11.11

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade SuiteCRM to a version that resolves this vulnerability.
Fixed in 7.10.23
Upgrade
Upgrade SuiteCRM to a version that resolves this vulnerability.
Fixed in 7.11.11

Event History

Mar 16, 2020

CVE Published

via MITRE·09:34 PM

Data Sourced

via MITRE·09:34 PM

Description

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2020-8787?

CVE-2020-8787 is a vulnerability in SuiteCRM versions prior to 7.10.23 and 7.11.11 that allows for an invalid Bean ID to be submitted.

What is the severity of CVE-2020-8787?