CVE-2022-50590 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functiona…
High CVSS: 8.8

CVE-2022-50590

SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects including changing the email address of the administrator.
Vendor
Salesagility
Product
Suitecrm
CWE
CWE-843
Yayın Tarihi
2025-11-06 20:15:36
Güncelleme
2025-11-24 19:05:39
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-843 Suitecrm HIGH Salesagility 2025

Referanslar

https://blog.exodusintel.com/2022/06/09/salesagility-suitecrm-deleteattachment-type-confusion-vulnerability/ https://docs.suitecrm.com/admin/releases/7.12.x/#_7_12_6 https://www.vulncheck.com/advisories/suitecrm-type-confusion-via-deleteattachment-functionality