CVE-2023-22952 Blast Radius

HIGH • CVSS 8.8In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation.

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2023-22952.

Start Free Scan →← Back to CVE-2023-22952