BIT-suitecrm-2022-45185

vendorUSosv

view advisory published 2025-04-16Licence: per source

An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can be used to achieve code execution.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-45185US	—	1.17% (67th)	—	2025-01-07
An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can be used to achieve code execution.

references

External citations — patches, advisories, analysis.

https://docs.suitecrm.com/admin/releases/7.12.x/WEB
https://github.com/Orange-Cyberdefense/CVE-repository/WEB
https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_SuiteCRM.pyWEB
https://nvd.nist.gov/vuln/detail/CVE-2022-45185WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan