SugarCRM Multiple Products: Remote Code Execution (CVE-2023-22952) ยท updates https://pwn.watch/i/sugarcrm-multiple-products-cve-2023-22952 Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates. Added to CISA KEV on 2023-02-02. en Thu, 02 Feb 2023 00:00:00 GMT SugarCRM Multiple Products: Remote Code Execution (CVE-2023-22952): CISA added CVE-2023-22952 to the KEV catalog (due 2023-02-23). https://pwn.watch/i/sugarcrm-multiple-products-cve-2023-22952 https://pwn.watch/i/sugarcrm-multiple-products-cve-2023-22952#2023-02-02-393fd0e3 Thu, 02 Feb 2023 00:00:00 GMT high <p>SugarCRM Multiple Products: Remote Code Execution (CVE-2023-22952): CISA added CVE-2023-22952 to the KEV catalog (due 2023-02-23).</p>