CVE-2023-35808 : An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.

An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. An Unrestricted File Upload vulnerability has been identified in the Notes module. By using crafted requests, custom PHP code can be injected and executed through the Notes module because of missing input validation. Regular user privileges can be used to exploit this vulnerability. Editions other than Enterprise are also affected.

Published 2023-06-17 22:15:09

Updated 2023-08-23 16:15:08

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2023-35808

Sugarcrm » Sugarcrm » Enterprise Edition
Versions from including (>=) 12.0.0 and before (<) 12.0.3
cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:enterprise:*:*:*
Matching versions
Sugarcrm » Sugarcrm » Serve Edition
Versions from including (>=) 12.0.0 and before (<) 12.0.3
cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:serve:*:*:*
Matching versions
Sugarcrm » Sugarcrm » Ultimate Edition
Versions from including (>=) 11.0.0 and before (<) 11.0.6
cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:ultimate:*:*:*
Matching versions
Sugarcrm » Sugarcrm » Professional Edition
Versions from including (>=) 11.0.0 and before (<) 11.0.6
cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:professional:*:*:*
Matching versions
Sugarcrm » Sugarcrm » Serve Edition
Versions from including (>=) 11.0.0 and before (<) 11.0.6
cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:serve:*:*:*
Matching versions
Sugarcrm » Sugarcrm » Sell Edition
Versions from including (>=) 12.0.0 and before (<) 12.0.3
cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:sell:*:*:*
Matching versions
Sugarcrm » Sugarcrm » Sell Edition
Versions from including (>=) 11.0.0 and before (<) 11.0.6
cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:sell:*:*:*
Matching versions
Sugarcrm » Sugarcrm » Enterprise Edition
Versions from including (>=) 11.0.0 and before (<) 11.0.6
cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:enterprise:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2023-35808

EPSS FAQ

0.19%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 58 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-35808

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-35808

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-35808

https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2023-006/

sugarcrm-sa-2023-006 - SugarCRM Support Site
Vendor Advisory
http://seclists.org/fulldisclosure/2023/Aug/26

Full Disclosure: [KIS-2023-05] SugarCRM <= 12.2.0 (Notes) Unrestricted File Upload Vulnerability
http://packetstormsecurity.com/files/174300/SugarCRM-12.2.0-Shell-Upload.html

SugarCRM 12.2.0 Shell Upload ≈ Packet Storm

Jump to

Vulnerability Details : CVE-2023-35808

Products affected by CVE-2023-35808

Exploit prediction scoring system (EPSS) score for CVE-2023-35808

CVSS scores for CVE-2023-35808

CWE ids for CVE-2023-35808

References for CVE-2023-35808