7.2
CVSSv3

CVE-2019-17314

Published: 07/10/2019 Updated: 09/10/2019
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

SugarCRM prior to 8.0.4 and 9.x prior to 9.0.2 allows directory traversal in the Configurator module by an Admin user.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sugarcrm sugarcrm