CVE-2023-22952
CISA 기관 조치 기한: 2023-02-23
SugarCRM Multiple Products
Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates.
KEV 필수 조치: Apply updates per vendor instructions.