{"cvss":0.0,"datePublished":"2023-02-02","dateUpdated":"2023-02-02","description":"Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates.","dueDate":"2023-02-23","id":"CVE-2023-22952","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2023-001/;  https://nvd.nist.gov/vuln/detail/CVE-2023-22952","product":"Multiple Products","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"Multiple SugarCRM Products Remote Code Execution Vulnerability","vendor":"SugarCRM"}