Vulnerabilities > Salesagility > Suitecrm > 7.12.4

DATE CVE VULNERABILITY TITLE RISK
2023-07-11 CVE-2023-3627 Cross-Site Request Forgery (CSRF) vulnerability in Salesagility Suitecrm
Cross-Site Request Forgery (CSRF) in GitHub repository salesagility/suitecrm-core prior to 8.3.1.
network
low complexity
salesagility CWE-352
8.8
2023-02-25 CVE-2023-1034 Path Traversal: '..filename' vulnerability in Salesagility Suitecrm
Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9.
network
low complexity
salesagility CWE-29
8.8
2022-03-10 CVE-2022-23940 Deserialization of Untrusted Data vulnerability in Salesagility Suitecrm
SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution.
network
low complexity
salesagility CWE-502
6.5
2022-03-07 CVE-2022-0754 SQL Injection vulnerability in Salesagility Suitecrm
SQL Injection in GitHub repository salesagility/suitecrm prior to 7.12.5.
network
low complexity
salesagility CWE-89
4.0
2022-03-07 CVE-2022-0755 Missing Authorization vulnerability in Salesagility Suitecrm
Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.
network
low complexity
salesagility CWE-862
4.3
2022-03-07 CVE-2022-0756 Missing Authorization vulnerability in Salesagility Suitecrm
Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.
network
low complexity
salesagility CWE-862
6.5