CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-23940

SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution. Authenticated users with access to the Scheduled Reports module can achieve this by leveraging PHP deserialization in the email_recipients property. By using a crafted request, they can create a malicious report, containing a PHP-deserialization payload in the email_recipients field. Once someone accesses this report, the backend will deserialize the content of the email_recipients field and the payload gets executed. Project dependencies include a number of interesting PHP deserialization gadgets (e.g., Monolog/RCE1 from phpggc) that can be used for Code Execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.449

EPSS Ranking 97.4%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2022-23940

Salesagility » Suitecrm » Version: 7.0.0

cpe:2.3:a:salesagility:suitecrm:7.0.0
Salesagility » Suitecrm » Version: 7.0.1

cpe:2.3:a:salesagility:suitecrm:7.0.1
Salesagility » Suitecrm » Version: 7.0.2

cpe:2.3:a:salesagility:suitecrm:7.0.2
Salesagility » Suitecrm » Version: 7.1.0

cpe:2.3:a:salesagility:suitecrm:7.1.0
Salesagility » Suitecrm » Version: 7.1.1

cpe:2.3:a:salesagility:suitecrm:7.1.1
Salesagility » Suitecrm » Version: 7.1.2

cpe:2.3:a:salesagility:suitecrm:7.1.2
Salesagility » Suitecrm » Version: 7.1.3

cpe:2.3:a:salesagility:suitecrm:7.1.3
Salesagility » Suitecrm » Version: 7.1.4

cpe:2.3:a:salesagility:suitecrm:7.1.4
Salesagility » Suitecrm » Version: 7.1.5

cpe:2.3:a:salesagility:suitecrm:7.1.5
Salesagility » Suitecrm » Version: 7.1.6

cpe:2.3:a:salesagility:suitecrm:7.1.6
Salesagility » Suitecrm » Version: 7.1.7

cpe:2.3:a:salesagility:suitecrm:7.1.7
Salesagility » Suitecrm » Version: 7.1.8

cpe:2.3:a:salesagility:suitecrm:7.1.8
Salesagility » Suitecrm » Version: 7.10.0

cpe:2.3:a:salesagility:suitecrm:7.10.0
Salesagility » Suitecrm » Version: 7.10.1

cpe:2.3:a:salesagility:suitecrm:7.10.1
Salesagility » Suitecrm » Version: 7.10.10

cpe:2.3:a:salesagility:suitecrm:7.10.10
Salesagility » Suitecrm » Version: 7.10.11

cpe:2.3:a:salesagility:suitecrm:7.10.11
Salesagility » Suitecrm » Version: 7.10.12

cpe:2.3:a:salesagility:suitecrm:7.10.12
Salesagility » Suitecrm » Version: 7.10.13

cpe:2.3:a:salesagility:suitecrm:7.10.13
Salesagility » Suitecrm » Version: 7.10.14

cpe:2.3:a:salesagility:suitecrm:7.10.14
Salesagility » Suitecrm » Version: 7.10.15

cpe:2.3:a:salesagility:suitecrm:7.10.15
Salesagility » Suitecrm » Version: 7.10.16

cpe:2.3:a:salesagility:suitecrm:7.10.16
Salesagility » Suitecrm » Version: 7.10.17

cpe:2.3:a:salesagility:suitecrm:7.10.17
Salesagility » Suitecrm » Version: 7.10.18

cpe:2.3:a:salesagility:suitecrm:7.10.18
Salesagility » Suitecrm » Version: 7.10.19

cpe:2.3:a:salesagility:suitecrm:7.10.19
Salesagility » Suitecrm » Version: 7.10.2

cpe:2.3:a:salesagility:suitecrm:7.10.2
Salesagility » Suitecrm » Version: 7.10.20

cpe:2.3:a:salesagility:suitecrm:7.10.20
Salesagility » Suitecrm » Version: 7.10.21

cpe:2.3:a:salesagility:suitecrm:7.10.21
Salesagility » Suitecrm » Version: 7.10.23

cpe:2.3:a:salesagility:suitecrm:7.10.23
Salesagility » Suitecrm » Version: 7.10.24

cpe:2.3:a:salesagility:suitecrm:7.10.24
Salesagility » Suitecrm » Version: 7.10.25

cpe:2.3:a:salesagility:suitecrm:7.10.25
Salesagility » Suitecrm » Version: 7.10.26

cpe:2.3:a:salesagility:suitecrm:7.10.26
Salesagility » Suitecrm » Version: 7.10.27

cpe:2.3:a:salesagility:suitecrm:7.10.27
Salesagility » Suitecrm » Version: 7.10.28

cpe:2.3:a:salesagility:suitecrm:7.10.28
Salesagility » Suitecrm » Version: 7.10.29

cpe:2.3:a:salesagility:suitecrm:7.10.29
Salesagility » Suitecrm » Version: 7.10.3

cpe:2.3:a:salesagility:suitecrm:7.10.3
Salesagility » Suitecrm » Version: 7.10.30

cpe:2.3:a:salesagility:suitecrm:7.10.30
Salesagility » Suitecrm » Version: 7.10.31

cpe:2.3:a:salesagility:suitecrm:7.10.31
Salesagility » Suitecrm » Version: 7.10.32

cpe:2.3:a:salesagility:suitecrm:7.10.32
Salesagility » Suitecrm » Version: 7.10.33

cpe:2.3:a:salesagility:suitecrm:7.10.33
Salesagility » Suitecrm » Version: 7.10.34

cpe:2.3:a:salesagility:suitecrm:7.10.34
Salesagility » Suitecrm » Version: 7.10.35

cpe:2.3:a:salesagility:suitecrm:7.10.35
Salesagility » Suitecrm » Version: 7.10.4

cpe:2.3:a:salesagility:suitecrm:7.10.4
Salesagility » Suitecrm » Version: 7.10.5

cpe:2.3:a:salesagility:suitecrm:7.10.5
Salesagility » Suitecrm » Version: 7.10.6

cpe:2.3:a:salesagility:suitecrm:7.10.6
Salesagility » Suitecrm » Version: 7.10.7

cpe:2.3:a:salesagility:suitecrm:7.10.7
Salesagility » Suitecrm » Version: 7.10.8

cpe:2.3:a:salesagility:suitecrm:7.10.8
Salesagility » Suitecrm » Version: 7.10.9

cpe:2.3:a:salesagility:suitecrm:7.10.9
Salesagility » Suitecrm » Version: 7.11.0

cpe:2.3:a:salesagility:suitecrm:7.11.0
Salesagility » Suitecrm » Version: 7.11.1

cpe:2.3:a:salesagility:suitecrm:7.11.1
Salesagility » Suitecrm » Version: 7.11.10

cpe:2.3:a:salesagility:suitecrm:7.11.10
Salesagility » Suitecrm » Version: 7.11.11

cpe:2.3:a:salesagility:suitecrm:7.11.11
Salesagility » Suitecrm » Version: 7.11.12

cpe:2.3:a:salesagility:suitecrm:7.11.12
Salesagility » Suitecrm » Version: 7.11.13

cpe:2.3:a:salesagility:suitecrm:7.11.13
Salesagility » Suitecrm » Version: 7.11.14

cpe:2.3:a:salesagility:suitecrm:7.11.14
Salesagility » Suitecrm » Version: 7.11.15

cpe:2.3:a:salesagility:suitecrm:7.11.15
Salesagility » Suitecrm » Version: 7.11.16

cpe:2.3:a:salesagility:suitecrm:7.11.16
Salesagility » Suitecrm » Version: 7.11.17

cpe:2.3:a:salesagility:suitecrm:7.11.17
Salesagility » Suitecrm » Version: 7.11.18

cpe:2.3:a:salesagility:suitecrm:7.11.18
Salesagility » Suitecrm » Version: 7.11.19

cpe:2.3:a:salesagility:suitecrm:7.11.19
Salesagility » Suitecrm » Version: 7.11.2

cpe:2.3:a:salesagility:suitecrm:7.11.2
Salesagility » Suitecrm » Version: 7.11.20

cpe:2.3:a:salesagility:suitecrm:7.11.20
Salesagility » Suitecrm » Version: 7.11.21

cpe:2.3:a:salesagility:suitecrm:7.11.21
Salesagility » Suitecrm » Version: 7.11.22

cpe:2.3:a:salesagility:suitecrm:7.11.22
Salesagility » Suitecrm » Version: 7.11.23

cpe:2.3:a:salesagility:suitecrm:7.11.23
Salesagility » Suitecrm » Version: 7.11.3

cpe:2.3:a:salesagility:suitecrm:7.11.3
Salesagility » Suitecrm » Version: 7.11.4

cpe:2.3:a:salesagility:suitecrm:7.11.4
Salesagility » Suitecrm » Version: 7.11.5

cpe:2.3:a:salesagility:suitecrm:7.11.5
Salesagility » Suitecrm » Version: 7.11.6

cpe:2.3:a:salesagility:suitecrm:7.11.6
Salesagility » Suitecrm » Version: 7.11.7

cpe:2.3:a:salesagility:suitecrm:7.11.7
Salesagility » Suitecrm » Version: 7.11.8

cpe:2.3:a:salesagility:suitecrm:7.11.8
Salesagility » Suitecrm » Version: 7.11.9

cpe:2.3:a:salesagility:suitecrm:7.11.9
Salesagility » Suitecrm » Version: 7.12

cpe:2.3:a:salesagility:suitecrm:7.12
Salesagility » Suitecrm » Version: 7.12.1

cpe:2.3:a:salesagility:suitecrm:7.12.1
Salesagility » Suitecrm » Version: 7.12.2

cpe:2.3:a:salesagility:suitecrm:7.12.2
Salesagility » Suitecrm » Version: 7.12.3

cpe:2.3:a:salesagility:suitecrm:7.12.3
Salesagility » Suitecrm » Version: 7.12.4

cpe:2.3:a:salesagility:suitecrm:7.12.4
Salesagility » Suitecrm » Version: 7.2.0

cpe:2.3:a:salesagility:suitecrm:7.2.0
Salesagility » Suitecrm » Version: 7.2.1

cpe:2.3:a:salesagility:suitecrm:7.2.1
Salesagility » Suitecrm » Version: 7.2.2

cpe:2.3:a:salesagility:suitecrm:7.2.2
Salesagility » Suitecrm » Version: 7.2.3

cpe:2.3:a:salesagility:suitecrm:7.2.3
Salesagility » Suitecrm » Version: 7.2.4

cpe:2.3:a:salesagility:suitecrm:7.2.4
Salesagility » Suitecrm » Version: 7.3.0

cpe:2.3:a:salesagility:suitecrm:7.3.0
Salesagility » Suitecrm » Version: 7.3.1

cpe:2.3:a:salesagility:suitecrm:7.3.1
Salesagility » Suitecrm » Version: 7.3.2

cpe:2.3:a:salesagility:suitecrm:7.3.2
Salesagility » Suitecrm » Version: 7.4.0

cpe:2.3:a:salesagility:suitecrm:7.4.0
Salesagility » Suitecrm » Version: 7.4.1

cpe:2.3:a:salesagility:suitecrm:7.4.1
Salesagility » Suitecrm » Version: 7.4.2

cpe:2.3:a:salesagility:suitecrm:7.4.2
Salesagility » Suitecrm » Version: 7.4.3

cpe:2.3:a:salesagility:suitecrm:7.4.3
Salesagility » Suitecrm » Version: 7.5.0

cpe:2.3:a:salesagility:suitecrm:7.5.0
Salesagility » Suitecrm » Version: 7.5.1

cpe:2.3:a:salesagility:suitecrm:7.5.1
Salesagility » Suitecrm » Version: 7.5.2

cpe:2.3:a:salesagility:suitecrm:7.5.2
Salesagility » Suitecrm » Version: 7.5.3

cpe:2.3:a:salesagility:suitecrm:7.5.3
Salesagility » Suitecrm » Version: 7.5.4

cpe:2.3:a:salesagility:suitecrm:7.5.4
Salesagility » Suitecrm » Version: 7.5.5

cpe:2.3:a:salesagility:suitecrm:7.5.5
Salesagility » Suitecrm » Version: 7.6.0

cpe:2.3:a:salesagility:suitecrm:7.6.0
Salesagility » Suitecrm » Version: 7.6.1

cpe:2.3:a:salesagility:suitecrm:7.6.1
Salesagility » Suitecrm » Version: 7.6.10

cpe:2.3:a:salesagility:suitecrm:7.6.10
Salesagility » Suitecrm » Version: 7.6.2

cpe:2.3:a:salesagility:suitecrm:7.6.2
Salesagility » Suitecrm » Version: 7.6.3

cpe:2.3:a:salesagility:suitecrm:7.6.3
Salesagility » Suitecrm » Version: 7.6.4

cpe:2.3:a:salesagility:suitecrm:7.6.4
Salesagility » Suitecrm » Version: 7.6.5

cpe:2.3:a:salesagility:suitecrm:7.6.5
Salesagility » Suitecrm » Version: 7.6.6

cpe:2.3:a:salesagility:suitecrm:7.6.6
Salesagility » Suitecrm » Version: 7.6.7

cpe:2.3:a:salesagility:suitecrm:7.6.7
Salesagility » Suitecrm » Version: 7.6.8

cpe:2.3:a:salesagility:suitecrm:7.6.8
Salesagility » Suitecrm » Version: 7.6.9

cpe:2.3:a:salesagility:suitecrm:7.6.9
Salesagility » Suitecrm » Version: 7.7.0

cpe:2.3:a:salesagility:suitecrm:7.7.0
Salesagility » Suitecrm » Version: 7.7.1

cpe:2.3:a:salesagility:suitecrm:7.7.1
Salesagility » Suitecrm » Version: 7.7.2

cpe:2.3:a:salesagility:suitecrm:7.7.2
Salesagility » Suitecrm » Version: 7.7.3

cpe:2.3:a:salesagility:suitecrm:7.7.3
Salesagility » Suitecrm » Version: 7.7.4

cpe:2.3:a:salesagility:suitecrm:7.7.4
Salesagility » Suitecrm » Version: 7.7.5

cpe:2.3:a:salesagility:suitecrm:7.7.5
Salesagility » Suitecrm » Version: 7.7.6

cpe:2.3:a:salesagility:suitecrm:7.7.6
Salesagility » Suitecrm » Version: 7.7.7

cpe:2.3:a:salesagility:suitecrm:7.7.7
Salesagility » Suitecrm » Version: 7.7.8

cpe:2.3:a:salesagility:suitecrm:7.7.8
Salesagility » Suitecrm » Version: 7.7.9

cpe:2.3:a:salesagility:suitecrm:7.7.9
Salesagility » Suitecrm » Version: 7.8.0

cpe:2.3:a:salesagility:suitecrm:7.8.0
Salesagility » Suitecrm » Version: 7.8.1

cpe:2.3:a:salesagility:suitecrm:7.8.1
Salesagility » Suitecrm » Version: 7.8.10

cpe:2.3:a:salesagility:suitecrm:7.8.10
Salesagility » Suitecrm » Version: 7.8.11

cpe:2.3:a:salesagility:suitecrm:7.8.11
Salesagility » Suitecrm » Version: 7.8.12

cpe:2.3:a:salesagility:suitecrm:7.8.12
Salesagility » Suitecrm » Version: 7.8.13

cpe:2.3:a:salesagility:suitecrm:7.8.13
Salesagility » Suitecrm » Version: 7.8.14

cpe:2.3:a:salesagility:suitecrm:7.8.14
Salesagility » Suitecrm » Version: 7.8.15

cpe:2.3:a:salesagility:suitecrm:7.8.15
Salesagility » Suitecrm » Version: 7.8.16

cpe:2.3:a:salesagility:suitecrm:7.8.16
Salesagility » Suitecrm » Version: 7.8.17

cpe:2.3:a:salesagility:suitecrm:7.8.17
Salesagility » Suitecrm » Version: 7.8.18

cpe:2.3:a:salesagility:suitecrm:7.8.18
Salesagility » Suitecrm » Version: 7.8.19

cpe:2.3:a:salesagility:suitecrm:7.8.19
Salesagility » Suitecrm » Version: 7.8.2

cpe:2.3:a:salesagility:suitecrm:7.8.2
Salesagility » Suitecrm » Version: 7.8.20

cpe:2.3:a:salesagility:suitecrm:7.8.20
Salesagility » Suitecrm » Version: 7.8.21

cpe:2.3:a:salesagility:suitecrm:7.8.21
Salesagility » Suitecrm » Version: 7.8.22

cpe:2.3:a:salesagility:suitecrm:7.8.22
Salesagility » Suitecrm » Version: 7.8.23

cpe:2.3:a:salesagility:suitecrm:7.8.23
Salesagility » Suitecrm » Version: 7.8.24

cpe:2.3:a:salesagility:suitecrm:7.8.24
Salesagility » Suitecrm » Version: 7.8.25

cpe:2.3:a:salesagility:suitecrm:7.8.25
Salesagility » Suitecrm » Version: 7.8.26

cpe:2.3:a:salesagility:suitecrm:7.8.26
Salesagility » Suitecrm » Version: 7.8.27

cpe:2.3:a:salesagility:suitecrm:7.8.27
Salesagility » Suitecrm » Version: 7.8.28

cpe:2.3:a:salesagility:suitecrm:7.8.28
Salesagility » Suitecrm » Version: 7.8.29

cpe:2.3:a:salesagility:suitecrm:7.8.29
Salesagility » Suitecrm » Version: 7.8.3

cpe:2.3:a:salesagility:suitecrm:7.8.3
Salesagility » Suitecrm » Version: 7.8.30

cpe:2.3:a:salesagility:suitecrm:7.8.30
Salesagility » Suitecrm » Version: 7.8.31

cpe:2.3:a:salesagility:suitecrm:7.8.31
Salesagility » Suitecrm » Version: 7.8.4

cpe:2.3:a:salesagility:suitecrm:7.8.4
Salesagility » Suitecrm » Version: 7.8.5

cpe:2.3:a:salesagility:suitecrm:7.8.5
Salesagility » Suitecrm » Version: 7.8.6

cpe:2.3:a:salesagility:suitecrm:7.8.6
Salesagility » Suitecrm » Version: 7.8.7

cpe:2.3:a:salesagility:suitecrm:7.8.7
Salesagility » Suitecrm » Version: 7.8.8

cpe:2.3:a:salesagility:suitecrm:7.8.8
Salesagility » Suitecrm » Version: 7.8.9

cpe:2.3:a:salesagility:suitecrm:7.8.9
Salesagility » Suitecrm » Version: 7.9.0

cpe:2.3:a:salesagility:suitecrm:7.9.0
Salesagility » Suitecrm » Version: 7.9.1

cpe:2.3:a:salesagility:suitecrm:7.9.1
Salesagility » Suitecrm » Version: 7.9.10

cpe:2.3:a:salesagility:suitecrm:7.9.10
Salesagility » Suitecrm » Version: 7.9.11

cpe:2.3:a:salesagility:suitecrm:7.9.11
Salesagility » Suitecrm » Version: 7.9.12

cpe:2.3:a:salesagility:suitecrm:7.9.12
Salesagility » Suitecrm » Version: 7.9.13

cpe:2.3:a:salesagility:suitecrm:7.9.13
Salesagility » Suitecrm » Version: 7.9.14

cpe:2.3:a:salesagility:suitecrm:7.9.14
Salesagility » Suitecrm » Version: 7.9.15

cpe:2.3:a:salesagility:suitecrm:7.9.15
Salesagility » Suitecrm » Version: 7.9.16

cpe:2.3:a:salesagility:suitecrm:7.9.16
Salesagility » Suitecrm » Version: 7.9.17

cpe:2.3:a:salesagility:suitecrm:7.9.17
Salesagility » Suitecrm » Version: 7.9.2

cpe:2.3:a:salesagility:suitecrm:7.9.2
Salesagility » Suitecrm » Version: 7.9.3

cpe:2.3:a:salesagility:suitecrm:7.9.3
Salesagility » Suitecrm » Version: 7.9.4

cpe:2.3:a:salesagility:suitecrm:7.9.4
Salesagility » Suitecrm » Version: 7.9.5

cpe:2.3:a:salesagility:suitecrm:7.9.5
Salesagility » Suitecrm » Version: 7.9.6

cpe:2.3:a:salesagility:suitecrm:7.9.6
Salesagility » Suitecrm » Version: 7.9.7

cpe:2.3:a:salesagility:suitecrm:7.9.7
Salesagility » Suitecrm » Version: 7.9.8

cpe:2.3:a:salesagility:suitecrm:7.9.8
Salesagility » Suitecrm » Version: 7.9.9

cpe:2.3:a:salesagility:suitecrm:7.9.9
Salesagility » Suitecrm » Version: 8.0

cpe:2.3:a:salesagility:suitecrm:8.0
Salesagility » Suitecrm » Version: 8.0.0

cpe:2.3:a:salesagility:suitecrm:8.0.0
Salesagility » Suitecrm » Version: 8.0.1

cpe:2.3:a:salesagility:suitecrm:8.0.1
Salesagility » Suitecrm » Version: 8.0.2

cpe:2.3:a:salesagility:suitecrm:8.0.2
Salesagility » Suitecrm » Version: 8.0.3

cpe:2.3:a:salesagility:suitecrm:8.0.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-23940

Products

Pricing

Contact Us