« Volver al listado

CVE-2023-46816

Estado: ModificadaAlta (8.8)—

An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. A Server Site Template Injection (SSTI) vulnerability has been identified in the GecControl action. By using a crafted request, custom PHP code can be injected via the GetControl action because of missing input validation. An attacker with regular user privileges can exploit this.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Sugarcrm — Sugarcrm

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-46816",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-46816",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-09T15:58:23.395540Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*"
          ],
          "vendor": "sugarcrm",
          "product": "sugarcrm",
          "versions": [
            {
              "status": "affected",
              "version": "12.0.0",
              "lessThan": "12.0.4",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "13.0.0",
              "lessThan": "13.0.2.",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2023-10-27T04:15:10.847",
  "references": [
    {
      "url": "https://support.sugarcrm.com/resources/security/sugarcrm-sa-2023-010/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.sugarcrm.com/resources/security/sugarcrm-sa-2023-010/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. A Server Site Template Injection (SSTI) vulnerability has been identified in the GecControl action. By using a crafted request, custom PHP code can be injected via the GetControl action because of missing input validation. An attacker with regular user privileges can exploit this."
    },
    {
      "lang": "es",
      "value": "Se descubrió un problema en SugarCRM 12 anterior a 12.0.4 y 13 anterior a 13.0.2. Se ha identificado una vulnerabilidad de inyección de plantilla de sitio de servidor (SSTI) en la acción GecControl. Al utilizar una solicitud manipulada, se puede inyectar código PHP personalizado a través de la acción GetControl debido a la falta de validación de entrada. Un atacante con privilegios de usuario habituales puede aprovechar esto."
    }
  ],
  "lastModified": "2026-06-17T06:31:41.777",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BCEA458-0427-445A-B74A-590934520C79",
              "versionEndExcluding": "12.0.4",
              "versionStartIncluding": "12.0.0"
            },
            {
              "criteria": "cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:sell:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1C36594-3456-4BDA-BFA2-000F5EE2D7DF",
              "versionEndExcluding": "12.0.4",
              "versionStartIncluding": "12.0.0"
            },
            {
              "criteria": "cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:serve:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B003912-9B1C-47A0-A924-6F1388932016",
              "versionEndExcluding": "12.0.4",
              "versionStartIncluding": "12.0.0"
            },
            {
              "criteria": "cpe:2.3:a:sugarcrm:sugarcrm:13.0.0:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "09C053BA-CB75-4C39-AFA6-C6E7BDC44BE0"
            },
            {
              "criteria": "cpe:2.3:a:sugarcrm:sugarcrm:13.0.0:*:*:*:sell:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDADB8E6-E436-46EF-A3C6-1482EEB24001"
            },
            {
              "criteria": "cpe:2.3:a:sugarcrm:sugarcrm:13.0.0:*:*:*:serve:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE19EDC5-18A6-41EC-BE08-CD2BCE7D74CC"
            },
            {
              "criteria": "cpe:2.3:a:sugarcrm:sugarcrm:13.0.1:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F7DAE96-4F17-498B-9158-3CC81157C2BF"
            },
            {
              "criteria": "cpe:2.3:a:sugarcrm:sugarcrm:13.0.1:*:*:*:sell:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D550659A-9E01-4548-B88B-2C6167CDDDD4"
            },
            {
              "criteria": "cpe:2.3:a:sugarcrm:sugarcrm:13.0.1:*:*:*:serve:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80CA0C95-E7E3-4DA1-9D3F-979BCE9E60FE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}