CVE-2023-6127

Summary

CVE-2023-6127 is a vulnerability that affects the GitHub repository salesagility/suitecrm prior to versions 7.14.2, 7.12.14, and 8.4.2. It involves the unrestricted upload of a file with a dangerous type. The vulnerability has a risk score of 25 and a base severity of MEDIUM. The exploitability score is 2.3, indicating a low privilege requirement and user interaction being required for exploitation. The attack vector is through the network, with low integrity and confidentiality impacts, and no availability impact. The danger it poses to an organization lies in potentially allowing an attacker to upload malicious files, which could lead to further exploitation or compromise of the affected system or network.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.