CVE-2021-41596

Published October 4th, 2021

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

MEDIUM

Affected

PROJECTS

Description

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality.

SuiteCRM/SuiteCRM

SuiteCRM - Open source CRM for the world

GitHub

5.5K

ach-ing/cves

GitHub