CVE-2020-8802: SQL Injection
Published Feb 13, 2020
·Updated
SuiteCRM through 7.11.11 has Incorrect Access Control via actionsaveHTMLField Bean Manipulation.
Affected Software
1 affected component
SalesAgility SuiteCRM<=7.11.11
Event History
Feb 13, 2020
CVE Published
via MITRE·03:13 PM
Data Sourced
via MITRE·03:13 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2020-8802?
CVE-2020-8802 is a vulnerability in SuiteCRM through 7.11.11 that allows incorrect access control through action_saveHTMLField bean manipulation.
2
How severe is CVE-2020-8802?
CVE-2020-8802 has a severity rating of 9.8 (critical).
3
Which software versions are affected by CVE-2020-8802?
SuiteCRM versions up to and including 7.11.11 are affected by CVE-2020-8802.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-8802?
CVE-2020-8802 is associated with CWE-89, which is the weakness for improper neutralization of special elements used in an SQL command ('SQL Injection').
5
How can I fix CVE-2020-8802?
To fix CVE-2020-8802, users should update to a version of SuiteCRM that includes the necessary security patch.