CVE-2023-22952 SugarCRM Multiple Products
Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates.
- CVSS
- not scored
On CISA’s exploited list
Multiple SugarCRM Products Remote Code Execution Vulnerability
- Added
- 2023-02-02
- Federal patch deadline
- 2023-02-23
- Ransomware use
- not known