CVE-2022-0754
Assigner: @huntrdev
Published: 2022-03-07T12:45:24
State: PUBLISHED
affected: product: salesagility/suitecrm
vendor: salesagility
versions: lessThan: 7.12.5
status: affected
version: unspecified
versionType: custom
descriptions: value: SQL Injection in GitHub repository salesagility/suitecrm prior to 7.12.5.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
version: 3.0
problemTypes: descriptions: cweId: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command
type: CWE
source: advisory: 8afb7991-c6ed-42d9-bd9b-1cc83418df88
discovery: EXTERNAL
title:  SQL Injection in salesagility/suitecrm