VULNERABILITY INTELLIGENCE

CVE-2023-35809

CVSS score8.8 HIGH

EPSS probability1.26%

CISA KEVNot currently listed

Published2023-06-17

Last modified2026-06-17

Description

An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability has been identified in the REST API. By using a crafted request, custom PHP code can be injected through the REST API because of missing input validation. Regular user privileges ca…