CVE-2023-5351 in SuiteCRM

Prediction

by VulDB Data Team • 10/25/2023

A vulnerability was detected in SalesAgility SuiteCRM up to 7.14.0. The affected element is an unknown function. The manipulation results in cross site scripting. It is possible to launch the attack remotely. Upgrading to version 7.14.1 is sufficient to fix this issue. The patch is identified as c43eaa311fb010b7928983e6afc6f9075c3996aa. It is recommended to upgrade the affected component.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsible: Huntr.dev
• Reservation: 10/03/2023
• Disclosure: 10/25/2023
• Moderation: accepted
• Entry: VDB-241171
• CPE: ready
• CWE: CWE-79 (confirmed)
• CVSS: 5.4 (NVD)
• EPSS: 0.00464
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-5351
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-5351
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-5351/