CVSS 3.1 Score 5.4 of 10 (medium)


Published Nov 14, 2023
Updated: Nov 17, 2023
CWE ID 434


CVE-2023-6127 is a vulnerability that affects the GitHub repository salesagility/suitecrm prior to versions 7.14.2, 7.12.14, and 8.4.2. It involves the unrestricted upload of a file with a dangerous type. The vulnerability has a risk score of 25 and a base severity of MEDIUM. The exploitability score is 2.3, indicating a low privilege requirement and user interaction being required for exploitation. The attack vector is through the network, with low integrity and confidentiality impacts, and no availability impact. The danger it poses to an organization lies in potentially allowing an attacker to upload malicious files, which could lead to further exploitation or compromise of the affected system or network.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-6127 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options