First published: Thu Feb 13 2020(Updated: )
SuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SalesAgility SuiteCRM | <=7.11.11 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2020-8800.
The severity of CVE-2020-8800 is high (8.8).
CVE-2020-8800 is a vulnerability in SuiteCRM that allows PHP object injection through the EmailsControllerActionGetFromFields.
SuiteCRM version 7.11.11 is affected by CVE-2020-8800.
To fix CVE-2020-8800, it is recommended to update SuiteCRM to a version higher than 7.11.11.