Beveiligingsadvies

CVE-2020-28328

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-11-06 18:18:05

Laatst bijgewerkt 2024-08-04 16:33:59

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, logger_file_name can refer to an attacker-controlled .php file under the web root.

← Alle CVE's bekijken Bekijk op cve.org ↗