CVE-2022-50590

Name of the Vulnerable Software and Affected Versions SuiteCRM versions prior to 7.12.6

Description SuiteCRM contains a type confusion issue in the processing of the module parameter within the deleteAttachment functionality. Successful exploitation could allow remote, unauthenticated attackers to alter database objects, including the ability to change the administrator's email address. The issue involves accessing a resource through incompatible types when handling the module parameter.

Recommendations Update to version 7.12.6 or later.