VULNERABILITY INTELLIGENCE

CVE-2019-17314

CVSS score7.2 HIGH

EPSS probability1.90%

CISA KEVNot currently listed

Published2019-10-07

Last modified2026-06-17

Description

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Configurator module by an Admin user.