QwikSec

Security Database

CVE

CWE

Training

CVE-2017-14510

Published: Sep 17, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 (and Sugar Community Edition 6.5.26). The WebToLeadCapture functionality is found vulnerable to unauthenticated cross-site scripting (XSS) attacks. This attack vector is mitigated by proper validating the redirect URL values being passed along.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-008/

x_refsource_MISC

https://www.synology.com/support/security/Synology_SA_17_53_SugarCRM

x_refsource_CONFIRM

https://blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.