CVE-2025-54785
SuiteCRM is Vulnerable to PHP Object Injection in Reports
概要
SuiteCRM is Vulnerable to PHP Object Injection in Reports
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.14.6 and 8.8.0, user-supplied input is not validated/sanitized before it is passed to the unserialize function, which could lead to penetration, privilege escalation, sensitive data exposure, Denial of Service, cryptomining and ransomware. This issue is fixed in version 7.14.7 and 8.8.1.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web docs.suitecrm.com