CVE-2023-5353 in SuiteCRM

Prediction

by VulDB Data Team • 10/23/2023

A security flaw has been discovered in SalesAgility SuiteCRM up to 7.14.0. This vulnerability affects unknown code. Performing a manipulation results in improper access controls. The attack is possible to be carried out remotely. Upgrading to version 7.14.1 is able to resolve this issue. The patch is named c43eaa311fb010b7928983e6afc6f9075c3996aa. The affected component should be upgraded.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsible: Huntr.dev
• Reservation: 10/03/2023
• Disclosure: 10/25/2023
• Moderation: accepted
• Entry: VDB-241168
• CPE: ready
• CWE: CWE-284 (confirmed)
• CVSS: 6.5 (NVD)
• EPSS: 0.00562
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-5353
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-5353
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-5353/