CVE-2024-58258: Code Injection
Published Jul 13, 2025
·Updated
SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur.
Affected Software
1 affected component
SugarCRM SugarCRM<13.0.4, <14.0.1
Event History
Jul 13, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeakness
Jul 16, 2025
Exploit Published
12:00 AM
Known Exploited
10:45 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-58258?
CVE-2024-58258 is classified as a critical vulnerability due to its potential for Server-Side Request Forgery (SSRF).
2
How do I fix CVE-2024-58258?
To fix CVE-2024-58258, update SugarCRM to version 13.0.4 or 14.0.1 or later versions.
3
What versions of SugarCRM are affected by CVE-2024-58258?
CVE-2024-58258 affects SugarCRM versions prior to 13.0.4 and 14.x versions before 14.0.1.
4
What are the risks of CVE-2024-58258?
The risks associated with CVE-2024-58258 include the possibility of unauthorized access to internal resources through SSRF attacks.
5
Is CVE-2024-58258 being actively exploited?
As of the last update, there were no reports of active exploitation of CVE-2024-58258, but it is still considered critical.