Description SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Studio module by a Developer user. Remediation References CVE-2019-17313 Related Vulnerabilities MySQL CVE-2023-21977 Vulnerability (CVE-2023-21977) WordPress Plugin Candidate Application Form Arbitrary File Disclosure (1.6) Moodle Incorrect Calculation Vulnerability (CVE-2022-30600) XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2023-29511) MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-8623) Severity High Classification CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-22 CVE-2019-17313