CVE-2023-22952 1

Vulnerability (CVE)

CVE-2023-22952: Multiple SugarCRM Products Remote Code Execution Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Feb 02, 2023

Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates.

Vulnerabilities & Patching