CVE-2022-27474

SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field

published April 15, 2022

CVSS
—
EPSS
23%
Percentile
97.8
In the wild
Unconfirmed
What it is

SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.23070 · 97.8th percentile
Published
2022-04-15T12:55Z
EPSS history
Timeline
  • 15 APR 12:55Z
    SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field
    cvelistv5