« Volver al listado

CVE-2025-54787

Estado: AnalizadaBaja (3.7)—

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. There is a vulnerability in SuiteCRM version 7.14.6 which allows unauthenticated downloads of any file from the upload-directory, as long as it is named by an ID (e.g. attachments). An unauthenticated attacker could download internal files when he discovers a valid file-ID. Valid IDs could be brute-forced, but this is quite time-consuming as the file-IDs are usually UUIDs. This issue is fixed in version 7.14.7.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Salesagility — Suitecrm

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-54787",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-54787",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-08-08T15:02:03.205768Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 3.7,
          "attackVector": "NETWORK",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "SuiteCRM",
          "product": "SuiteCRM",
          "versions": [
            {
              "status": "affected",
              "version": ">= 7.14.6, < 7.14.7"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-08-07T22:15:35.673",
  "references": [
    {
      "url": "https://docs.suitecrm.com/admin/releases/7.14.x/#_7_14_7",
      "tags": [
        "Release Notes"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-8r72-224q-g9fv",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-285"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. There is a vulnerability in SuiteCRM version 7.14.6 which allows unauthenticated downloads of any file from the upload-directory, as long as it is named by an ID (e.g. attachments). An unauthenticated attacker could download internal files when he discovers a valid file-ID.\nValid IDs could be brute-forced, but this is quite time-consuming as the file-IDs are usually UUIDs. This issue is fixed in version 7.14.7."
    },
    {
      "lang": "es",
      "value": "SuiteCRM es una aplicación de software de gestión de relaciones con clientes (CRM) de código abierto y lista para empresas. Existe una vulnerabilidad en la versión 7.14.6 de SuiteCRM que permite la descarga no autenticada de cualquier archivo del directorio de carga, siempre que tenga un ID (por ejemplo, archivos adjuntos). Un atacante no autenticado podría descargar archivos internos al descubrir un ID de archivo válido. Los ID válidos podrían ser forzados, pero esto requiere bastante tiempo, ya que los ID de archivo suelen ser UUID. Este problema se solucionó en la versión 7.14.7."
    }
  ],
  "lastModified": "2026-06-17T09:40:42.237",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93703CB5-D416-40F5-B83F-23BCCAED8293",
              "versionEndExcluding": "8.8.1",
              "versionStartIncluding": "8.6.0"
            },
            {
              "criteria": "cpe:2.3:a:salesagility:suitecrm:7.14.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4AF203E-EFE6-4DC2-8C36-041CB6AAFF44"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-advisories@github.com"
}