CVE-2021-41597

Published January 12th, 2022

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

6.8

MEDIUM

Affected

PROJECTS

Description

SuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the UpgradeWizard functionality, if a PHP file is included in a ZIP archive.

SuiteCRM/SuiteCRM

SuiteCRM - Open source CRM for the world

GitHub

5.5K

ach-ing/cves

GitHub