CVE-2022-45185: High severity suitecrm vulnerability
Published Jan 7, 2025
·Updated
An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can be used to achieve code execution.
Affected Software
2 affected components
SuiteCRM SuiteCRM
SalesAgility SuiteCRM=7.12.7
Event History
Jan 7, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-45185?
CVE-2022-45185 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2022-45185?
To mitigate CVE-2022-45185, update SuiteCRM to the latest version released by the vendor that includes patch solutions.
3
Who is affected by CVE-2022-45185?
Any user of SuiteCRM version 7.12.7 is affected by CVE-2022-45185.
4
What type of attack can be executed using CVE-2022-45185?
CVE-2022-45185 can lead to remote code execution by exploiting file upload and deserialization vulnerabilities.
5
Is authentication required to exploit CVE-2022-45185?
Yes, an authenticated user is required to exploit CVE-2022-45185 to upload malicious files.