CVE-2023-6128: Cross-site Scripting (XSS) - Reflected in salesagility/suitecrm
Published Nov 14, 2023
·Updated
Cross-site Scripting (XSS) - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.
Affected Software
5 affected components
SalesAgility SuiteCRM<7.12.14
SalesAgility SuiteCRM=7.14.0
SalesAgility SuiteCRM=7.14.1
SalesAgility SuiteCRM=8.4.0
SalesAgility SuiteCRM=8.4.1
Remediation
Event History
Nov 14, 2023
CVE Published
04:11 PM
Data Sourced
04:11 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2023-6128.
2
What is the severity of CVE-2023-6128?
The severity of CVE-2023-6128 is medium with a CVSS score of 6.8.
3
Which software versions of SalesAgility SuiteCRM are affected by CVE-2023-6128?
The affected software versions of SalesAgility SuiteCRM are prior to 7.14.2, 7.12.14, and 8.4.2.
4
What is the Common Weakness Enumeration (CWE) category for CVE-2023-6128?
The Common Weakness Enumeration (CWE) category for CVE-2023-6128 is CWE-79 (Cross-Site Scripting).
5
How can I fix the Cross-Site Scripting (XSS) vulnerability CVE-2023-6128?
To fix the Cross-Site Scripting (XSS) vulnerability CVE-2023-6128, upgrade SalesAgility SuiteCRM to version 7.14.2, 7.12.14, or 8.4.2.