CVE-2015-5948 Race condition in n/a

What is CVE-2015-5948?

CVE-2015-5948 is a high-severity vulnerability in Salesagility Suitecrm, published on 6 Sep 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Race condition in SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-5947.

Weakness: CWE-362

Which versions are affected by CVE-2015-5948?

It affects 1 product.

Products include Salesagility Suitecrm.

How do I fix CVE-2015-5948?

No fix has been published for CVE-2015-5948 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-5948 being exploited?

There is no known exploitation of CVE-2015-5948 in the wild and no public exploit code.

Other vulnerabilities in Salesagility Suitecrm

• CVE-2024-36412 SuiteCRM unauthenticated SQL Injection Critical 10.0
• CVE-2024-1644 Suite CRM v7.14.2 - RCE via Local File Inclusion Critical 9.9
• CVE-2021-45898 Path traversal in n/a Critical 9.8
• CVE-2021-45899 Deserialization in n/a Critical 9.8
• CVE-2020-8783 SQL injection in n/a Critical 9.8

All Salesagility Suitecrm vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5x67-mpx5-h47q.