Lucene search
GoogleOSV:CVE-2021-41597HistoryJan 12, 2022 - 8:15 p.m.
CVE-2021-41597
2022-01-1220:15:08
Google
osv.dev
5
suitecrm
csrf
vulnerability
remote code execution
upgradewizard
zip archive
php file
SuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the UpgradeWizard functionality, if a PHP file is included in a ZIP archive.
Related
cvelist
cvelist
CVE-2021-41597
2022-01-12 19:17:05
cve
cve
CVE-2021-41597
2022-01-12 20:15:08
cnvd
cnvd
SuiteCRM Cross-Site Request Forgery Vulnerability
2022-01-16 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-01-12 20:15:00
nvd
nvd
CVE-2021-41597
2022-01-12 20:15:08
osv
osv
BIT-suitecrm-2021-41597
2024-03-06 11:09:44