Security Advisory

CVE-2022-50589

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-11-06 19:59:12
Last updated 2026-07-15 01:24:42
Assigner VulnCheck
CVSS score 9.3
State PUBLISHED

Description

SuiteCRM versions prior to 7.12.6 contain a SQL injection vulnerability within the processing of the ‘uid’ parameter within the ‘export’ functionality. Successful exploitation allows remote unauthenticated attackers to ultimately execute arbitrary code.