VULNERABILITY INTELLIGENCE

CVE-2022-50590

CVSS score5.3 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2025-11-06
Last modified2026-07-15
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects including changing the email address of the administrator.

Weakness classification

  • disclosure@vulncheck.com: CWE-843

Primary references