DeutschShown in its original language — a full translation is planned for a future version.
SuiteCRM: Mehrere Schwachstellen ermöglichen Manipulation von Dateien
view advisory published 2025-11-06
Ein Angreifer kann mehrere Schwachstellen in SuiteCRM ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, erweiterte Berechtigungen zu erlangen oder Cross-Site-Scripting-Angriffe durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-64491US | — | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.7 and below allow unauthenticated reflected Cross-Site Scrip… | ||||
| CVE-2025-64490US | —OT elevated | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.7 and prior, 8.0.0-beta.1 through 8.9.0 allow a low-privileg… | ||||
| CVE-2025-64489US | high8.8 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.7 and prior, 8.0.0-beta.1 through 8.9.0 contain a privilege… | ||||
| CVE-2025-64488US | high8.8 | — | ||
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.14.7 and below and 8.0.0-beta.1 through 8.9.0 8.0.0-beta.1,… | ||||
02
references
External citations — patches, advisories, analysis.
- SuiteCRM GitHub Security Advisory GHSA-5v53-v44q-ww2c vom 2025-11-06external
- SuiteCRM GitHub Security Advisory GHSA-j6jg-9jj3-q2ph vom 2025-11-06external
- SuiteCRM GitHub Security Advisory GHSA-jh8v-wqgj-hhc2 vom 2025-11-06external
- SuiteCRM GitHub Security Advisory GHSA-prfm-6667-x3mv vom 2025-11-06external
- WID-SEC-W-2025-2516 - CSAF Versionself
- WID-SEC-2025-2516 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan