repository icon
salesagility / suitecrm Project repository

SuiteCRM - Open source CRM for the world

Submit a report

FIRST INTERACTION

WITHIN1 DAY

REVIEW

WITHIN39 DAYS

FIX

WITHIN64 DAYS

Server-Side Request Forgery (SSRF)
shahzaibak96
Medium
•CVE-2023-6124
JavaScript Code Execution in PDF
shahzaibak96
Medium
•CVE-2023-6125
Unauthenticated Graphql Introspection Enabled
x3419
pending
Open Redirect / XSS via iframe with sandbox
x3419
informative
None
HTML injection in Tittle
nam-no
Medium
•CVE-2023-6126
File Upload caused XSS (Import account)
nam-no
Medium
•CVE-2023-6127
UI REDRESSING
tharunavula
pending
SQL Injection in opportunities module
sarprt323
Medium
•CVE-2023-5350
SQL Injection in opportunities module
ghost
duplicate
Medium
Restricted LFI to Code Execution via SubpanelCreates.php
navsec
High
•CVE-2023-6130
Reflected XSS via Upgrade Wizard
navsec
Medium
•CVE-2023-6128
Arbitrary File Upload to RCE via Upgrade Wizard
navsec
High
•CVE-2023-6131
Insufficient access control in the export functionality for the 'Groups' module...
illume-security
High
•CVE-2023-5353
Stored XSS in the Cases functionality
illume-security
High
•CVE-2023-5351
Host Header Injection in /legacy
tanish-mahajan
self closed
HTML Injection in Body, Header and Footer fields
ahmedgamal0011
self closed
Denial of Service
ahmedgamal0011
self closed
Input returned in response (reflected)
dmandefy
pending
Backup files visible in web server root directory
dmandefy
pending
Limited LFI via Path Traversal
cr4ckc4t
Medium
•CVE-2023-1034
External service interaction (DNS)
dmandefy
pending
Multiple SQL Injections
vautia
Medium
Reflected Cross-Site Scripting due to Improper Sanitization
vautia
Critical
Remote Code Execution via LFI (Authenticated)
talhakarakumru
pending
By sending a payload, you can shut down the activity steam feature
lekhang123lc
pending
User can edit email template without privilege
lekhang123lc
pending
Improper Authorization
faisalfs10x
Medium
•$30•CVE-2022-0756
Improper Access Control
faisalfs10x
High
•$30•CVE-2022-0755
SQL Injection
faisalfs10x
High
•$30•CVE-2022-0754
Open Redirect
mdakh404
pending