Security

Report a vulnerability

.github/SECURITY.md

Security Policy

Supported Versions

For a list of supported versions, please see the documentation Supported Versions page.

Reporting a Vulnerability

To report a security issue, please use the GitHub Security Advisory "Report a Vulnerability" tab.

For details on how to report a vulnerability please check our Security Policy page.

Authenticated Blind SQL Injection in DeleteRelationShip
GHSA-53xh-mjmq-j35p published Nov 5, 2024 by jack7anderson7

High
ModuleScanner flaws
GHSA-9v56-vhp4-x227 published Nov 5, 2024 by jack7anderson7

High
RCE in ModuleBuilder
GHSA-qrv6-3q86-qv89 published Nov 5, 2024 by jack7anderson7

Moderate
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRM
GHSA-5hr4-r43c-6qf7 published Nov 5, 2024 by jack7anderson7

Moderate
Wrong deletion permission checks on API delete call
GHSA-8qfx-h7pm-2587 published Sep 5, 2024 by clemente-raposo

High
Authenticated SQL injection in AM_ProjectTemplates controller
GHSA-4xj8-hr85-hm3m published Nov 5, 2024 by jack7anderson7

High
Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation
GHSA-8rw6-g96j-3w7m published Nov 5, 2024 by jack7anderson7

Moderate
Authenticated SSRF on Activity Stream Feed
GHSA-2674-4gq4-j4f4 published Jun 10, 2024 by jack7anderson7

Moderate
Authenticated RCE using connectors
GHSA-mfj5-37v4-vh5w published Jun 10, 2024 by jack7anderson7

High
Stored XSS Vulnerability Allows Code Execution via Malicious iFrame
GHSA-3www-6rqc-rm7j published Jun 10, 2024 by jack7anderson7

Moderate

Learn more about advisories related to salesagility/SuiteCRM in the GitHub Advisory Database