CVE-2019-17301 - SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user

HIGH

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user

Published Oct 7, 2019

7.2

HIGH

CVSS 3.1

EPSS 1.35%

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user.

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7714		Advisory
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-028/		x_refsource_MISCVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 7, 2019

Updated Aug 5, 2024

Reserved Oct 7, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Oct 7, 2019

Updated Aug 5, 2024

Exploited since n/a