high7.2
CVE-2019-17307
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user.
Impact
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sugarcrm | Sugarcrm | from 7.9.0.0 before 7.9.5.0 from 8.0.0 before 8.0.4 from 9.0.0 before 9.0.2 |