Lucene search

K
osvGoogleOSV:CVE-2021-41596
HistoryOct 04, 2021 - 5:15 p.m.

CVE-2021-41596

2021-10-0417:15:08
Google
osv.dev
3
suitecrm
information disclosure
directory traversal
import functionality
cve-2021-41596

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

46.6%

SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality.

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

46.6%

Related for OSV:CVE-2021-41596