CVE-2023-6127: Unrestricted Upload of File with Dangerous Type in salesagility/suitecrm
Published Nov 14, 2023
·Updated
Unrestricted Upload of File with Dangerous Type in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.
Affected Software
5 affected components
SalesAgility SuiteCRM<7.12.14
SalesAgility SuiteCRM=7.14.0
SalesAgility SuiteCRM=7.14.1
SalesAgility SuiteCRM=8.4.0
SalesAgility SuiteCRM=8.4.1
Remediation
Event History
Nov 14, 2023
CVE Published
04:01 PM
Data Sourced
04:01 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-6127?
CVE-2023-6127 is a vulnerability in the GitHub repository salesagility/suitecrm prior to versions 7.14.2, 7.12.14, and 8.4.2
2
What is the severity of CVE-2023-6127?
The severity of CVE-2023-6127 is medium, with a CVSS score of 5.4
3
How does CVE-2023-6127 affect SalesAgility SuiteCRM?
CVE-2023-6127 affects SalesAgility SuiteCRM versions prior to 7.14.2, 7.12.14, and 8.4.2
4
How can I fix CVE-2023-6127?
To fix CVE-2023-6127, update SalesAgility SuiteCRM to versions 7.14.2, 7.12.14, or 8.4.2
5
Where can I find more information about CVE-2023-6127?
More information about CVE-2023-6127 can be found at the following references: [link1](https://huntr.com/bounties/bf10c72b-5d2e-4c9a-9bd6-d77bdf31027d), [link2](https://github.com/salesagility/suitecrm/commit/54bc56c3bd9f1db75408db1c1d7d652c3f5f71e9)